> That's absolutely right. I haven't disclosed vulnerabilities for several websites because of this exact reason. Depending on how you learned of said vulnerab

> That's absolutely right. I haven't disclosed vulnerabilities for several websites because of this exact reason. Depending on how you learned of said vulnerabilities, you might still be culpable for the mere act of discovering them.