[tptacek]

It's interesting how much this little subthread recapitulates the experience of responding to the median bug bounty submission.

[a1369209993]

Well, modulo "responding to a submission" versus "reporting a vulnerabity", we can certainly agree on that at least.