[WrtCdEvrydy]

A friend of mine swears that you can be sued for 'business damages' over improper disclosure. Sadly, the US is a non-permissive environment so I tend to believe it.

[tptacek]

I think that friend of yours is almost certainly wrong, and for decades now there have been notable researchers who disclose publicly and immediately.

[IncRnd]

In many cases that is correct, but in practice this will never happen.