Researcher discloses security bug because Twitter doesn't reward bounty hunters | Hacker News Reader