There was a security researcher, Antonio or someone whose name started with "A". He posts up all security related flawes on the internet. He emails the affected companies with the site, and tells them they need to correct it.
Otherwise the method is completely public. Perhaps a similar stance may help you?
Although many people here would yell at me for proposing such a thing, this security researcher proved it works.
Companies are a little more complaint when the method is out in the open, and your telling them to fix it.
|