How to Assess a Security Vendor on the Sitting-Duck Scale | Hacker News Reader