Security researcher Zachi says he found an exploit in an app and reported it.
After two months with no reply to his bug report,
he tried again — this time by emailing the vendor from its own email address, with the message: "I'M WRITING TO YOU RIGHT NOW FROM YOUR OWN EMAIL."