How Not To Run A Vulnerability Disclosure Program

from blog Jeffrey Paul, | ↗ original
I found a small vulnerability in American Express today. Nothing major, but something they’ll definitely want to fix.