How much time do you think that would have bought? At least a few minutes, but definitely not days. And at what cost would it be? I'm all in favor of giving

How much time do you think that would have bought? At least a few minutes, but definitely not days. And at what cost would it be? I'm all in favor of giving people more time to upgrade, but this issue was very unusual. Multiple groups were all finding it at the same time and who knows when the first "full disclosure is always the right answer" group would have started singing? Like it or not, full-disclosure people exist in the world, and responsible-disclosure people need to be aware of their existence. If just one person/group had found this, RoR could have done a better "get ready to upgrade next Tuesday at 6am" followed by a "here is the patch, details to follow tomorrow" on Tuesday at 6am.