> he provided helpful advice They use the 'they/them' pronouns. Do you run a large open source project or website that gets security contacts? The vast majori

> he provided helpful advice They use the 'they/them' pronouns. Do you run a large open source project or website that gets security contacts? The vast majority of security reports are poorly written and bogus, with the person either trying to get money or pad their resume with CVE. I think that contributes to developer's wariness of these things, and the "please prove that this is a real security issue" attitude you often see. May I reference: Beg bounties - https://news.sophos.com/en-us/2021/02/08/have-a-domain-name-beg-bounty-hunters-may-be-on-their-way/ https://news.sophos.com/en-us/2021/02/08/have-a-domain-name-... The bogus CVE problem - https://lwn.net/Articles/944209/ https://lwn.net/Articles/944209/