It's perfectly legal to use vulnerabilities on machines that you own, publicly advertise it, and refuse to disclose the details. It's a free country. Funny that

It's perfectly legal to use vulnerabilities on machines that you own, publicly advertise it, and refuse to disclose the details. It's a free country. Funny that the infosec community traditionally supports this and opposes mandatory disclosure laws. If you had to disclose any vulnerabilities that you find, you'd never get paid for it. There wouldn't even be bug bounties, since those exist because of the vulnerability market. The fact that it's the government also adds in the great deference that the courts give the government on national security issues. And it would be with good reason in this case. Vulnerabilities are used to craft attacks against our country's enemies (see Stuxnet).