This post discusses the responsible disclosure of security vulnerabilities.