Appropriate reward for identifying security flaw?
Recently I was looking at a nice font and the blog by creator of the font. I was poking around and realise that the blog points towards resources from the font's author website and I noticed a reference in the html to a supposedly full version of the font.It turned out to be the full version and I reported this to the creator. He then asked what I wanted as a reward and I indicated that it...