>> A colleague said: "The three-letter agencies are done with these, so they can go public now" - I wonder how true that is? > Likely. Considering the three le

>> A colleague said: "The three-letter agencies are done with these, so they can go public now" - I wonder how true that is? > Likely. Considering the three letter agencies get early access to these things from other vendors: https://arstechnica.com/information-technology/2013/06/nsa-gets-early-access-to-zero-day-data-from-microsoft-others/ https://arstechnica.com/information-technology/2013/06/nsa-g... Though, it's worth noting that the NSA actually two roles: 1) ensuring the security of US Government communications systems and 2) conducting signals intelligence against other foreign communications systems. People focus so much on the former that they often forget the latter. Given their defensive role, being "done" with these exploits may mean simply having patched/secured all their systems against them.