I hope that they're cooler than instagram when it comes to bug bounties. This person here found multiple security issues in instagram and instead of paying him they threatened him: http://www.exfiltrated.com/res...

Would be nice if they called out the malicious nodes when they're detected as a deterrent against future attacks. Yes, I'm thinking about CMU as I write this.

I hope so!