Eine recht ausführliche Antwort auf sein Posting kam heute von Jason Coombs: Das beste, was einem in solch einem Notfall passieren könnte, seien gut informierte Administratoren und Benutzer, die auf die drohende Gefahr kompetent reagieren können und nicht nur mangels Informationen im Trüben herumstochern müssen. Außerdem sei es unverantwortlich, solche Informationen zurückzuhalten:

The most important mitigating factor is always an informed population that is ready, willing, and able to act when action is required to ensure the security and integrity of information systems and protect stake-holders who would otherwise be both at-risk and uninformed; it is irresponsible for a security researcher to trust somebody else to disseminate important information about new vulnerabilities and it is further irresponsible for a person who knows of a security vulnerability to keep it secret for a prolonged period of time in the irrational and narcissistic hope that nobody else is smart enough to find the same vulnerability.

Trotzdem ist das aktuelle Advisory von David Litchfield zu einem Buffer-Overflow im Microsoft RPC Locator deutlich zurückhaltender ausgefallen: "Although sample exploit code has been provided to the vendor, due to the recent events of last weekend, NGSSoftware are loathe to publish this publicly at this juncture - however we may after a grace period."