[mknappen]

Did Ramses Martinez have the authority to pay people who found issues and instead sent tee shirts? Have people been paid in the past? If yes to both, the "no good deed goes unpunished" and "I'm new here so lay off" response is disingenuous. However, if there was no way Martinez could have paid bounties or no history of payouts, the grumpy response to not being showered with cash is unreasonable. (And perhaps Martinez, et al., already knew of this particular vulnerability.)