RT @gollmann: Vuln disclosure is rude - http://erratasec.blogspot.com/2010/04/vuln-disclosure-is-rude.html (@erratarob)