Bug bounty drives VLC\'s biggest patch but attracts \'assholes\, scriptkiddies\, scammers\'