obra’s Twitter Archive—№ 6,528

When first notifying a vendor of a security issue, it's polite to tell them that you intend to go public in 48h rather than just doing so.