>> Esser put people at risk. >That's non-provable until we see it instantiated. That's not how risk works. I don't even know where to start. If you play a rou

>> Esser put people at risk. >That's non-provable until we see it instantiated. That's not how risk works. I don't even know where to start. If you play a round of Russian Roulette and happen to hit an empty chamber, do you say it's impossible to prove you were at risk? Do you see now how dumb that argument is? If he publicized a vulnerability, the risk to all of the affected systems is increased. Period. It's the same way that EMPs are a risk to airlines. If someone releases a method to generate them very easily, they increase the risk to all airlines. You don't have to wait until an airline is brought down before you say the risk was increased.