How to expose a problem without creating a bigger problem

[Shepherd]

Exposing tech bug, website issues, security holes... mostly not a big deal, notify the owner and then public after owner has time to fix.

What about an area like identity theft. What if you were to see an emerging trend, a hole being exploited? How would you get information out without publishing a road map for fraudsters?

[keyplyr]

I'd first check to see if it's a known issue. If not, report it to the appropriate agency and let them handle it.

[Shepherd]

There's about 3,400 "appropriate agencies".

[keyplyr]

Start with number one

[ipco]

Surely depends on the hole as to who fills it.

[engine]

It'd certainly be worthwhile only sharing it with the authorities. Making it public can sometimes hinder apprehension of the perpetrators and expose more user data.