Bug bounty drives VLC's biggest patch but attracts 'a-holes, scriptkiddies, scammers'

A top developer of open-source media player VLC and critic of bug bounties shares lessons learned.