alt Hacker NewsThose norms do not exist. Those are people asking companies to do stuff to benefit the person complaining for free, and many companies will not do that.
Those norms do not exist. Those are people asking companies to do stuff to benefit the person complaining for free, and many companies will not do that.
It seems to me you're unaware of them, but there are strong norms around disclosure. They've been discussed for decades. It is the expectation that vendors would be notified in a scenario like this.