>>What do you think the best policy is for maintaining an effective arsenal and maintaining "0day responsibility"? I think the best policy is for them to not m

>>What do you think the best policy is for maintaining an effective arsenal and maintaining "0day responsibility"? I think the best policy is for them to not maintain an "effective arsenal" at all, the second they find a vulnerability they should report it.