eh? That's done literally all the time. But before the fact, not after. I believe ptacek was complaining about unilateral disclosure. I'm arguing that the rese

eh? That's done literally all the time. But before the fact, not after. I believe ptacek was complaining about unilateral disclosure. I'm arguing that the researcher was pushed into it. However, it's still grey: just because you are presented with an option you simply don't like, doesn't mean you leak actual data. You can still disclose the breach without exposing the data. It's very grey.