> The announced it. Perhaps you think it should have been sooner? Yes, they did. After it was investigated by the WSJ, 6+ months after the fact. I'm not a real

> The announced it. Perhaps you think it should have been sooner? Yes, they did. After it was investigated by the WSJ, 6+ months after the fact. I'm not a real stickler about disclosure timelines beyond "wait for the patch please", but "only after it leaks several months later" still rubs me the wrong way. > They followed their legal obligations and - even more important to me - I have no ethical or professional issues with the way they managed the incident. Ethical standards vary widely. Personally, in the category of "Things Google has done that raise ethical concerns", I don't think this incident is significant enough to bother mentioning. But I do think it sits in a bit of a moral gray area.