Microsoft wouldn't look at a bug report without a video. Researcher maliciously complied