The Defense Department's vulnerability disclosure policy lets anyone in the world report security holes they find in the DoD system without fear of prosecution.
