> I don't think that's Google's job at all, especially for a competitor's product. I think that any level of care they would take in describing the impact of a

> I don't think that's Google's job at all, especially for a competitor's product. I think that any level of care they would take in describing the impact of a flaw in their own product, ethically, the same level care must be taken when describing the impact of security flaws in a competitor’s product. Otherwise this goes from white-hat to grey-hat hacking, and it serves to undermine the stated goals and intentions of Project Zero.