When is it right to go public with security flaws? | Hacker News Reader