$ 0 0 A developer says he disclosed a security hole to Moonpig and finally went public after it went unfixed for 17 months.