Adam Shostack 
Is the European Commission also paying Mastodon admins to patch their instances?
Is anyone scanning the fediverse to see what the patching practices are today?
Less sarcastically I am confident that setting up a bug bounty for open source projects that aren’t ready for them, and not funding submission triage is actively counterproductive
Mez@adamshostack omg tots. There’s not a reblog with comments? Ok then.