I have tried this approach and it has failed me. The biggest problem with being independent is landing clients who are in need of the service.
I have also tried shotgun approach via private vulnerability disclosure. At best it typically results in nothing more than 'thanks' -- but most frequent is outright ignoring, angry response, bruised egos, threats with law enforcement, and general unpleasantry. -- so I've learned to avoid doing that.
I have also tried shotgun approach via private vulnerability disclosure. At best it typically results in nothing more than 'thanks' -- but most frequent is outright ignoring, angry response, bruised egos, threats with law enforcement, and general unpleasantry. -- so I've learned to avoid doing that.