Comment by sarciszewski

Heh. I literally search for and report vulnerabilities in my downtime to recharge between development cycles. It doesn't feel like contributing, especially since most of the problems I find can be found via grep. :/