> My advice is do not bother. There is almost no upside for you and likely very significant downsides. Years ago I realised that security bug reporting is a pa

> My advice is do not bother. There is almost no upside for you and likely very significant downsides. Years ago I realised that security bug reporting is a painful experience at best, from about 2006 I decided I'd stop tracking and reporting software security bugs that I find, which while not the optimal solution has made my life a lot less stressful.