> So just as giving a vendor no time to fix a vulnerability is irresponsible, so is it even more irresponsible to give that vendor a blank rain check. http://k

> So just as giving a vendor no time to fix a vulnerability is irresponsible, so is it even more irresponsible to give that vendor a blank rain check. http://kevtownsend.wordpress.com/2012/09/01/java-vulnerability-and-irresponsible-disclosure/ http://kevtownsend.wordpress.com/2012/09/01/java-vulnerabili...