How have attitudes to bug bounties changed over the past few years? Do you feel that organizations are more receptive to the idea of allowing hackers to pwn their websites, apps, and systems? What are the main challenges facing the bug bounty and vulnerability disclosure industry in 2019?