The Fallen Madonna with the Big Boobies
So just for this one guy's input Valve have paid out on two bounties totalling £45k, I can't help but wonder a few things...
Why aren't they just employing a couple of staff to be full time pen testers, surely it's the cheaper option?
While this bounty program is in place I would be worried that any internal staff of questionable morals coming across a bug would, rather than fixing said bug would look to strike a deal with an external pen tester to share a bounty.
Sorry for calling you Shirley.
Biting the hand that feeds IT
