AMD took over four months to fix a critical security bug in its autoupdater, and the security researcher didn't see a dime for his efforts