>A company has no duty to report to you about just because you kindly notified them of a vulnerability in their software. Then you have no duty to report the v

>A company has no duty to report to you about just because you kindly notified them of a vulnerability in their software. Then you have no duty to report the vuln to the company and instead should feel free to disclose it to the world. A little politeness goes a long ways on both sides.