From Black Hat: To disclose or not to disclose?
Though there is still much dissension in the security world over what is the right way to disclose security vulnerability, a panel of researchers, vendors and end users all agreed at Black Hat yesterday that the disclosure environment has improved over the last several years.