It is a very difficult problem to solve. I do know that. It's been about 9 months since I first informed them of the issue. I sent them source code that illus

It is a very difficult problem to solve. I do know that. It's been about 9 months since I first informed them of the issue. I sent them source code that illustrates an attack. Many of their customers are being affected right now, by something. I can't prove that this is the mechanism behind the current wave of attacks, though I can prove that this mechanism would allow a hacker to compromise sites exactly as is being described by victims. They did take me seriously. I believe they aren't fixing the problem because they will have to rewrite a lot of their code, their customers will have to rewrite code, and many will be forced to find another provider all together, which means the solution has negative financial impacts. Not solving it means negative financial impacts on their customers in lost time to rebuild affected data. It's very well possible that malicious people know about this and are using it right now to gather usernames and passwords for later attacks. Hundreds, perhaps thousands, of databases may have been siphoned off already. How do you "turn up the heat" ?