Hacker News new | comments | show | ask | jobs | submit login

As he clearly explained, one can't simply equate contacting the guilty vendors with an offer of nondisclosure with "doing the right thing".

"The right thing" is carefully considering and balancing a variety of qualitative factors and guesswork (and to not expect much thanks in return).

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | DMCA | Apply to YC | Contact