I've seen someone post a question with some code in it, with a really large security issue in it. I commented on the question that the security hole must be fixed, but I wonder how we should, more generally, be handling this type of issue.
A naive person may post code with such a problem in it, and also information to identify the site itself in the same post, which holds potential for disaster.
Even if the code in the question is fixed, the poster has still permanently advertised the problem to the world, meaning they haven't just left the door open, they've put up a big sign saying so as well.
Are there people "on their own", or should the community step up and take some level of responsibility here?