I wrote yesterday about how not to run a vulnerability disclosure program:
https://sneak.berlin/20210424/how-not-to-run-a-vulnerability-disclosure-program/
The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!