[tptacek]

If you tell them that unless they pay you or retain you as a contractor by a certain date that you'll publish, you are in fact extorting them.

People who have found vulnerabilities and also been naive about the law have run aground on this before.

[huhtenberg]

Do you have any examples?

[tptacek]

I'm worried that if I start Googling this I'll lose a couple hours of my day to a "researching vulnerability extortion" jag.