And to carry on from what vlion said, there is in fact a time and a place for knowing about a security hole and not telling people about it. That time and place is after discovering it, after telling the people responsible for fixing it about it, and before they fix it.
Notice how "fix it" is in this timeline.
The other thing is when those responsible for fixing it decide that a good fix is "Okay, so long as nobody knows about it, nobody will exploit it, right?" THIS IS NOT A GOOD FIX. THIS IS A VERY BAD FIX.
no subject
Notice how "fix it" is in this timeline.
The other thing is when those responsible for fixing it decide that a good fix is "Okay, so long as nobody knows about it, nobody will exploit it, right?" THIS IS NOT A GOOD FIX. THIS IS A VERY BAD FIX.