[battousai]

"I'm not wild about people releasing vulnerabilities before a patch is available, but this does seem to be rather slow in coming...."

If the company knows about the vulnerability, you can bet that its already well known in the underground, so it helps no one to keep it secret, by letting more people in on it someone might come up with a solution faster.

[general_re]

There is always that kind of tradeoff, unfortunately. At least in this case, the discoverer did let Apple know about the problem before releasing it. That strikes me as somewhat more responsible than simply going public without even the courtesy of a note to the vendor.