@soatok did you ever get any useful eyes on it? Did you dump the disclosure publicly? (And if so, did they whine that you didn't use proper channels?)
a Schelling point for those who seek one
