This is the full disclosure vs antisec debate... if they posted it after they had a patched version out, the best thing to do is explain the issue and get peopl

This is the full disclosure vs antisec debate... if they posted it after they had a patched version out, the best thing to do is explain the issue and get people to upgrade, in my opinion. Granted, I didn't read the original blog post. Were they distributing tools to make it easy? Or were they explaining how it worked? In any case, if he hadn't written the blog post, someone else would have.