She seems a really nice person. Afterall, the exploit fixed would of never been found if it wasn't for her. There's an interesting debate going on in the
vBulletin 3.7.2 Release Discussion - Jessica Hope is actually participating in that.

Some people seem to think it is wrong for her to give a demo link exploit... well I don't think it is. She reported it in private to Jelsoft first, but they just said it isn't an exploit and dismissed it. So, she reported it publicly. Check it out:
http://securitytracker.com/alerts/2008/Jun/1020322.html