> On Sep 29, 2015, at 3:57 PM, Harlan Stenn <stenn at nwtime.org> wrote: > > Good info, Barry - thanks! > > I appreciate your offer, too! Here is a brain dump: https://www.linkedin.com/pulse/5-principles-vulnerability-disclosure-barry-greene For the people who are not vendors on the list, the post has some good questions to ask your vendors about their vulnerability disclosure processes.