By now we’re used to the idea of software companies running bug bounty initiatives which hand out thousands of dollars in prizes to independent researchers who find and responsibly disclose security holes ...