After reading the linked ZDNet article, looks like Apple is only allowing extensions in Safari to block content with in the browser. Thus allowing things like Ghostery and NoScript to be possible or more affective in iOS 9. Bottom line, if you want ad-blocking in iOS 9 you will have to wait for the proper ad-blocking extension to be available, or write one yourself.
I agree with LizardKing's post. To know about a security venerability and not tell anyone for more than an year is completely immoral and wrong. The attitude that one should only report security vulnerabilities for some type of payment is a dangerous precedent.
If this type a behavior made it into the FLOSS community, it would be a disaster.
Say I found a venerability in Firefox. Should I go to the Mozilla Foundation and demand payment for finding this bug? Of course not, that is like asking for a ransom.
If you want to get paid for finding security vulnerabilities. Go work for a security company like the other security researchers out there.