RE: Releasing patches is bad for security

["Ross M. W. Bennetts" <rbennett () une edu au>]

> The vulnerability was discovered by Eeye Digital Security in July 2003 but
> no exploits were produced until three days after Microsoft's patch became
> available.

[Ross M. W. Bennetts] 
But if a hacker did produce an exploit wouldn't he/she be more likely to use
it surreptitiously for their own private purposes and then only release it
to the kiddies on the net after the patch has been released?


---------------------------------------------------------------------------
----------------------------------------------------------------------------