Security and OSS bugs: the bounty problem. Posted on April 3, 2015 by jgordon Link. Perverse incentives abound.