Researcher claims $15,000 bug bounty by picking holes in Google’s bug tracker