Keep it simple
If you think you have identified a security related issue, please report it immediately to brucebentley@me.com.
Better not open issues related to any security concerns publicly.
When reporting an issue, include as much information as possible.