As the bug bounty programs begin to roll out in January, security experts worry that the programs miss the mark on truly securing open source projects.
Source: Threadpost