This guy didn't even get paid for this? We need a law that establishes mandatory payments for cybersecurity bounty hunters.