If you create any
kind of software—big, small, commercial, free, open or closed souce—please provide some useful contact info for reporting security issues.
No, I will not register anywhere to do so. Not your forum, not twitter, definitely not Facebook! A contact form works, but email is prefered. If you can't handle reports by email or an open contact form, I'm very tempted to just go full disclosure on you right away!