And this is why I've never notified anyone about any security issues I find, better to laugh and move on. Twenty years ago or so, I offered help to parties and

And this is why I've never notified anyone about any security issues I find, better to laugh and move on. Twenty years ago or so, I offered help to parties and every one of them accused me of causing the problem or otherwise being malicious. Let them find their own problems, I'll focus on my own. A major US retailer used to have their entire OMS/back-office on an ip, it was that way for years despite multiple reports. And then they got ravaged when the first bad actor came along, easily preventable and they were warned.