How to handle responsible disclosure, or really what to avoid with a case study about University of Oregon, and what they could've done better.
