Rationale: discoverability without having to jump through several hoops.

Side note: Security hole: password change dialog doesn't ask for a user's current password has been going on for a year with the team evidently unwilling to comment.

  • FWIW, the security page with instructions for submitting reports shows up in the top few results when I Google things like "stack exchange report security issue", so I don't think the process is too bad. – Jeremy Mar 14 '16 at 18:31

You must log in to answer this question.

Browse other questions tagged .