This reminds me of an old folk tale of the trickster and the rich man.<p>A king passing through a town finds a man about to be punished for fraud. He intercedes and asks what the matter is. The trickster says in his defence, "I ask people for things, and they give then to me". The king is incredulous but poses a challenge: "You must ask and receive money from the richest man in town." The trickster agrees, but being short on assets, requests a loan. The king obliges, and the trickster arranges (eliding details) to induce the town's richest resident to provide him with a wealth of goods. He returns to the king two days later with evidence in tow. The king is impressed by this demonstration, at which the trickster notes that he'd actually met the conditions 48 hours earlier when the king, wealthier than the town's richest resident, had offered him a loan.<p>There's something to those old stories.<p>(I'm not positive of the source but believe it's included in Idries Shah's <i>World Tales</i>.)
1. Create issues for items I need fixed on my github repos.<p>2. Offer a $100 bounty to people who can trick me into getting some string into my projects. The easiest way to "trick" me of course is to hide it inside of a PR which fixes a real issue.<p>3. Find and remove the string before merging the PR. I've had one of my issues fixed for free. Rinse and repeat!<p>Bonus Round: Stage an announcement on twitter and have someone cleverly trick me into including the string on my website (which I was totally going to do anyway). Post clever trick to code geek social media and reap the sweet free viral marketing and hackers trying to earn a Benjamin.
An acknowledgement of the win: <a href="https://twitter.com/DefuseSec/status/730903547747819520" rel="nofollow">https://twitter.com/DefuseSec/status/730903547747819520</a><p>The offer still stands though, if you'd like to try:
<a href="https://twitter.com/DefuseSec/status/730904219419443200" rel="nofollow">https://twitter.com/DefuseSec/status/730904219419443200</a>
Are some of you actually arguing over whether or not the website qualifies as a "software project?" Goodness, maybe stop taking the world so literally/seriously.
Another way to win this bounty would be to share some code with the string BackdoorPoCTwitter with the same color as the page background. If he copy and paste the code it could work. ^^
Calling a website that happens to host static content in the same repo as its PHP source a "release of a software project" really seems like a stretch.