Rebooting Responsible Disclosure: a focus on protecting end users

It seems that there has been some hostility toward responsible disclosure this year. Mainly, I'm speaking of how Apple treated Charlie Miller recently. I've responsibly disclosed problems with an online business (to whom I am a customer), and gotten either indifference, or a legal threat.

BBC News: "German citizens are responsible for the security of their own private wireless connections, a court has ruled."

I performed a openVAS scan on a Windows Server 2008 R2 and got a report for a high threat level vulnerability called Microsoft RDP Server Private Key Information Disclosure Vulnerability.

eSecurityPlanet: "Google is updating the stable version of its Chrome Web browser for Windows, Mac and Linux, addressing a handful of security vulnerabilities -- including four that could put users at risk simply by viewing a maliciously constructed image file."

Wired: "California prosecutors investigating Gizmodo's purchase of a prototype iPhone have offered a new argument for keeping details of the probe a secret: Public disclosure could compromise �the identity of an informer."

do any of these help...i have no idea what im doing though lol

Google Android version 2.3.7 : Security vulnerabilities

Google Android 2.3.7 : Related security vulnerabilities

http://www.allinfosec.com/2012/05/05/local-exploits-android-2-3-7-sqlite...

Softpedia: "Raoul Chiesa, a renowned European security expert, was forced to cancel his presentation at the Hack in the Box (HITB) Security Conference after legal threats from ATM vendors. He was supposed to present the results of years of research into the underground economy."

Ghacks: " If you have read any of the Samba content here on Ghacks you probably will have noticed that within the smb.conf configuration file a line that begins with security =. This is a very important part of Samba setup and generally the section that gives users the most problems"