[general_re]

I'm not wild about people releasing vulnerabilities before a patch is available, but this does seem to be rather slow in coming....

[Bush2000]

I'm not wild about people releasing vulnerabilities before a patch is available, but this does seem to be rather slow in coming....

I agree. There really ought to be a standard for the length of time that's acceptable for security researchers to hold back reporting a problem. Eight weeks does seem like a long time but, if it's a complicated fix, that needs to be taken into account.

[battousai]

"I'm not wild about people releasing vulnerabilities before a patch is available, but this does seem to be rather slow in coming...."

If the company knows about the vulnerability, you can bet that its already well known in the underground, so it helps no one to keep it secret, by letting more people in on it someone might come up with a solution faster.