Who reports the “low hanging fruit” security issues? | Hacker News Reader