Ondřej Surý was a relatively anonymous volunteer working on PHP security. Then the internet exploded.