cURL’s bug bounty one year in | Hacker News Reader