Comment Re:As a former ISS employee... (Score 1) 194
This type of discussion always assumes that the first public disclosure of a vulnerability is the actual initial discovery of the vulnerability. That's not a very comforting assumption.