It's a long-running debate in the security community, almost as big as full-vs-responsible disclosure. On the pro side, it's better than you get patched than s

It's a long-running debate in the security community, almost as big as full-vs-responsible disclosure. On the pro side, it's better than you get patched than stay vulnerable and fall into someone else's zombie list. On the anti side, you don't know what you are messing with and could break things, oh, and it's illegal and you can go to jail. On the anti-anti side, if you can't be held responsible to patch your machines, don't complain when someone else does it for you. That's the barest summary.