> that wasn't aggressively used by any would-be exploiters. Doesn't matter. A response shouldn't be measured according to how widely a security hole was exploi

> that wasn't aggressively used by any would-be exploiters. Doesn't matter. A response shouldn't be measured according to how widely a security hole was exploited, it should always be responded to with full information and transparency.