Hired to fix a small bug but code is filled with security holes. What do you do? | Hacker News Reader