But the practice is far too commonly to sue the discloser rather than the manufacturer of the software.