How not to respond to a security disclosure | Dark Hacker News