Who normalised curl | bash, and have they received an appropriate punishment?