Interview with software developer Iain Row on the experience of reporting a vulnerability he discovered on the website of UK-based retailer Card Factory.