@techtraveler @WPalant Or he should have pseudonymously leaked it them using a throwaway account. With a note to the effect that if they didn't correct it, the next step would be to post it to a public forum.