Security expert Dana Epp has a blog that anyone who uses software should read (and particularly those who do hacking security research): The Cost in Fixing Bugs and How Irresponsible Disclosure Doesn’t Help the Matter.