Step 1: Don't patch decade-old flaws Step 2: Wait for white hats to prove the vulns Step 3: Wait two months to release a fix after you're notified Step 4: Se

Step 1: Don't patch decade-old flaws Step 2: Wait for white hats to prove the vulns Step 3: Wait two months to release a fix after you're notified Step 4: Send proof-of-concept exploit code to "partners" in China Step 5: Act shocked and outraged when multiple Chinese groups simultaneously pwn hundreds of thousands of your customers