24 hour notice? Give me a break! Really rapid patches are just likely to break things and introduce further bugs.

The guy should responsibly notify the provider as soon as he finds any vulnerability, and he should give them at least a week (even more would be better) to react before publishing the information publicly. 24 hours is hardly better than any advance notice at all.
Aaron | 06.26.09 - 3:20 pm | #