Make DST chances apply on the same day everywhere in the world.
This will solve most of the troubles with scheduling international conferences and international flight schedules. There would be summer schedule and one winter schedule, and that's it.
First, get what can can be achieved easily. Then push for more radical changes.
Edit: Also stop the spring clock change from being on Sundays. That's just dumb.
Figure out another way to reward this guy (maybe tell him that it's a gesture of goodwill only) and reward him. It doesn't have to be from Facebook, Inc, but he should get something from somewhere.
Otherwise, next time him or any of his friends find a vulnerability, they'd be tempted to share it with the people who would reward them, since they've seen firsthand that their reports to facebook seem to just get ignored. When you consider that his entire region is in turmoil, and that social media is clearly playing an important role in the uprisings across that region [whether you agree with them or not], you'll understand our reasons for insisting that his efforts be rewarded somehow.
Edit 1: Not suggesting that fb intentionally ignores their reports for poor English or any other reason, but that's clearly the impression they're getting.
Edit 2: And while I have no reason to believe that this guy (Khalil) would ever report a vulnerability to some dictator's security forces, others who have seen this story might. And those who have seen this need not be his friends either, since it's on HN, /r/technology, and elsewhere.
Edit 3: As tszming suggested, if you don't want to risk setting a precedent by offering cash, you could perhaps sponsor an all-expenses-paid trip (with no implications of future employment) for him to visit Facebook HQ. Granted I don't know the legal implications of this, but it does give you a chance to buy this guy lunch and tell him in person that you do appreciate his efforts, motivate him to continue reporting any vulnerabilities he finds, and tell him to encourage his friends to do the same. Actions speak louder than words, and there's no question this would have a far bigger impact than the dismissive two-liner he received, even if the intention was the same.
I think it's okay that, as the donor, you want some reassurance that they won't spend all your money on drugs. They have a choice to not accept your donation.
Ideally it would be a combination of money and food.
The $2 figure quoted for Indian is not the middle 2/3, but the lowest 2/3, so it would have very little to do with the median. Let's go by the figures we actually have (mean):
Per-capita income in India is $1492
Per-capita income in the USA is $49,922
So, it's around 1583/1492 = 1.06 years of work in India.
And, 106385/49922 = 2.13 years of work in the USA.
And since the hospital price is actually 95k Indian rupees, exchange-rate fluctuations do not matter.
How do you verify the data for Middle Eastern countries which don't really have street address systems or zipcodes, and only use PO Boxes? Just check that the PO Box exists?