Quoting the top comment from the other discussion, which I think hits the nail on it's head: Company finds a security vulnerability caused by a bug. Logs show

Quoting the top comment from the other discussion, which I think hits the nail on it's head: Company finds a security vulnerability caused by a bug. Logs show that it has never been used by anyone. It patches the vulnerability. Should the company announce it publicly? PS: Keeping in mind that this is part of the Murdoch vs. Google war going on for about 10 years: https://news.ycombinator.com/item?id=18169083 https://news.ycombinator.com/item?id=18169083