Who's box is this anyway? Establishing asset ownership in vuln reporting

disclose.substack.com