what about viral code that's already in the public domain? if you see litter on the street do you add to it? just because it's 'out there' doesn't mean everyone who wants it has it... why raise it's search profile? why make it easier for the wrong people to find? why contribute to that problem?

with full disclosure of conventional vulnerabilities the benefits outweight that downside, but with viral code you can't get the benefits...

as for making sure the professionals can protect against it, the people who can make the best use of it almost always get it very early on - this case is a remarkable outlier...

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11379/33336#33336