When a non-customer does you the courtesy of pointing out serious flaws in your system, you do not ask them to detail it publicly via twitter. Nor is it a good

When a non-customer does you the courtesy of pointing out serious flaws in your system, you do not ask them to detail it publicly via twitter. Nor is it a good idea to make them jump through hoops. You know what method of disclosure doesn't have hoops? Posting an email to the Full Disclosure mailing list. Look. I'm all for giving the company a chance but if you put up arbitrary hoops up for me to jump through... Why shouldn't I take the path of least resistance again?