@png @drwhax That's true! In an ideal world that could be the norm. But until that's in place, at least some of us could chip in. Wasn't that the way things were ran in the good old days -- submitting patches for problems? A crowd pointing at problems all the time can be strongly demotivating, but it does not have to be that way. Yet I am still to hear of a security expert submitting solutions together with problems they point out. A rare animal indeed.

@drwhax @png I mean, it would not kill you to also submit a patch fixing the issue you found, would it. Certainly isn't the silver bullet, but I am sure it could help many of those overworked poor souls.

So.. have you submitted patches together with your reports?