The "Standard" responsible disclosure technique is as follows: 1. Discover vulnerability 2. Inform vendor, tell them they'll have x weeks before general disclo

The "Standard" responsible disclosure technique is as follows: 1. Discover vulnerability 2. Inform vendor, tell them they'll have x weeks before general disclosure 3. After x weeks, post it to the relevant place on seclists.org