Rationale: discoverability without having to jump through several hoops.

Side note: Security hole: password change dialog doesn't ask for a user's current password has been going on for a year with the team evidently unwilling to comment.

  • FWIW, the security page with instructions for submitting reports shows up in the top few results when I Google things like "stack exchange report security issue", so I don't think the process is too bad.
    – Jeremy
    Mar 14, 2016 at 18:31


You must log in to answer this question.

Browse other questions tagged .