This is certainly the correct approach to take individually. Advantage to you of trying to disclose the flaw: zero in most cases. Disadvantage to you of tryin

This is certainly the correct approach to take individually. Advantage to you of trying to disclose the flaw: zero in most cases. Disadvantage to you of trying to disclose the security flaw: possibly years in jail, hundreds of thousands of dollars spent. It's unfortunate that this is true, but it's true nonetheless. The country needs a Computer Good Samaritan law, where those who follow a prescribed process for flaw disclosure are granted complete immunity from prosecution, civil suits and general harassment.