> It doesn't matter who found them or when. It does matter. No vulnerability can be used without knowledge of that vulnerability, therefore it matters who foun

> It doesn't matter who found them or when. It does matter. No vulnerability can be used without knowledge of that vulnerability, therefore it matters who found it (did they publish or abuse the vulnerability?) and when (was it published shortly after the first discovery?).