Maybe you know this, maybe you do not but these are all a nod to http://insecure.org/stf/smashstack.html which itself did not directly involve profit. It's a security thing.
I know, but it's the equivalent of "x considered harmful". It just shows a lack of originality.
Given that this code is used in major browsers that pay quite generous bug bounties it's likely that they made quite some profit out of that project.
I wish those titles had a weight to drag them off the front page much quicker.