If a White Hat Researcher Discovers a Vulnerability in a Software

Multiple Choice

If a White Hat researcher discovers a vulnerability in a software product, what should she do with the information?

A) Create a tutorial complete with screenshots and submit the finding to digg.com and slashdot.org
B) Call the vendor and offer to keep quiet if they pay you a finder's fee
C) Prove the exploit works, then sell a script on eBay
D) Report the vulnerability to a regional emergency response organization