Hi, just a news, if you are interested: https://www.google.com/about/appsecurity/patch-rewards/
"we announced a new, experimental program that rewards proactive security improvements to select open-source projects [...] Projects in scope [...] Core infrastructure network services: OpenSSH, [...] Rewards for qualifying submissions will range from $500 to $3,133" Cool
