So I’m the guy who sent the t-shirt out as a thank you
(Note, I technically work for Yahoo - but this is all personal opinion)<p>Great on Yahoo for putting a reward program in place, but when did everyone become so entitled to getting something for reporting a bug/security concern.<p>If you stumble on to an issue, and you are a good person, submit the report. If you are looking to make a living off of finding bugs, go directly to the companies that actually have a reward program in place. Don't be mad when you get a thank you gift that wasn't what you expected. Don't get mad at your security report not meeting guidelines.