[darkbot]

This is definitely out of the scope of their "bughunt", although I think the guy should be rewarded anyway.

But I'm also quite upset with the fact that OP is outing the dev. Everybody makes mistakes, no need to out any individual developer because OP is pissed at the company management.

[infosec_au]

I realised 2-3 hours after my blog post, and rushed to redact the last names from the post + pdf. I have now also redacted last names from the screenshots. Sorry about that! But thank you for letting me know. :)

[vertis]

FYI, You can still see the url of the user on bitbucket and from there still get a name.