there's a world of difference in contacting a company via an ethical vulnerability disclosure program and doing so without one in place. it really shouldn't be

there's a world of difference in contacting a company via an ethical vulnerability disclosure program and doing so without one in place. it really shouldn't be that difficult to understand. Being "german" has nothing to do with it