I mean, the whole purpose of legal liability is to make them care. Isn’t this just the system working as intended? If anything, my conclusion is that security

I mean, the whole purpose of legal liability is to make them care. Isn’t this just the system working as intended? If anything, my conclusion is that security researchers shouldn’t have any qualms about releasing vuln info. By all means, give the concerned party an opportunity to act in good faith, but when they invariably don’t, send it..