New posts in Disclosure

How do I inform a company I found a leaked database of theirs on the Internet?

Avoiding the race condition between time of release and time of update

How to proceed with a white-hat hacker claiming a vulnerability?

My old job has massive security exploits in their product, but they dont care

Is demanding a "donation" before disclosing vulnerabilities black hat behavior?

Should I contact the manufacturer if their product allows access to other users' location information?

Are staggered roll outs of security patches bad?

How should I tell school that they are vulnerable when I wasn't given permission to check?

Why submit a website to plaintext offenders?

How do I report a security vulnerability about a trusted certificate authority?