I would like to point out that open source projects love, absolutely LOVE when you report security bugs to them. Many projects have procedures and special maili

I would like to point out that open source projects love, absolutely LOVE when you report security bugs to them. Many projects have procedures and special mailing lists to get a hold of the correct people in a prompt manner. To me this stinks of the "closed mind" problem.