How to report a vulnerability and not go to jail
This article is more like something to think about rather than technical guide. It contains my thoughts with which you do not necessarily agree, but I will be happy to hear your opinion, maybe I will be able to improve my approach on the subject.
The topic may seem simple in general. You find a bug, a hole, a vulnerability. You report it