Why every organization should make it easy to report security flaws

“option. and so, the reporter contacts the company ' s public relations department, they realize that word is starting to get out about the thing they tried to ignore, the company fixes the problem ( or not ), and issues a statement (... or not ). the reporter publishes a story ab…”