Re:Ask HN: How long to give a website to fix their security ...
by maushu on Friday October 22, 2010 @10:18AM
(#1819761)
Send a high priority email to their customer support (or alike), wait 24 hours, if no response is received then tell the customers (blog post? forum thread? hnews/reddit?).
If response is received wait a week or so and, again, check for the existence of the exploit.
If response is received wait a week or so and, again, check for the existence of the exploit.