Please suggest papers/presos on responsible compromise notification. i.e. “Hi, you are owned.”, not “Hi, you are vulnerable.” abuse@? Still?