Eric, some thoughts (this is not an argument for or against
full-disclosure, please take it as constructive criticism):

After reading your paper I agree that the data you used may support your
arguments, however, you missed some important points. You don't take into
account the "type" of vulner...

[ more ]