Should people who discover a software vulnerability make the information public?

摘要

Full disclosure leads to attacks, but attack activity ends sooner, write Sam Ransbotham and Sabyasachi Mitra