>Mike, you should know that skilled crackers have excellent communication networks and will exchange newly discovered exploits among themselves at the speed of the net regardless if they are reported by anyone or not.

Whats your point?

If the explitation details and code is withheld until the patches are avilable, there is a small chance that someone may get cracked data, but the probablity of a huge virus situation happening in the mean time is cut down hugely. If you were MS, which would you rather have on your hands? Its an easy call for me. Save off posting the working details. That doesn't mean warnings can be sent out right away, and maybe the details are sent to a select few high priority trusted clients. I dunno how that side of things work.

But I do think that having some security comprimised at the individual cracker level is a better thing than having an enourmous amount of security comprimised with a simple, amatuer self propagating virus.

If I'm thinking wrong, feel free to start a thread addressed to me in the Chatter forum of the UT.