I want to be more specific about the concept of sharing. There are two uses of "sharing" in the response. One was sharing of vulnerabilities. It was never clea

I want to be more specific about the concept of sharing. There are two uses of "sharing" in the response. One was sharing of vulnerabilities. It was never clear who it was shared with. It could be with the DoD, with GCHQ, with private contractors under contract with the NSA, etc. and still be counted as "sharing." The other is an example of sharing one patch, for the Bash vulnerability, with the private sector. I think we are supposed to connect those two pieces of data, but there's no reason to do so.