3.1.2 Vulnerability Reporting
It is generally expected that a software vendor’s quality assurance process
will entail testing for vulnerabilities. Customers who report vulnerabilities
back to vendors may be given credit, as is the case when Microsoft receives