> Historically, it's more likely that the vulnerability was already known among cracking circles, Why do you say this? It implies a world where software is al

> Historically, it's more likely that the vulnerability was already known among cracking circles, Why do you say this? It implies a world where software is almost perfectly secure, and there are only a few bugs to fix, and then it's perfectly secure, and we are all happy. In reality, there are effectively an infinite number of bugs out there, many with security holes. Finding one and going through the motions to fix, patch, test, and release still leaves you software with plenty of open holes. If you magically theorize "the bad guys know about all the holes already," then they are still going to exploit all the other holes in the system, because they magically know about them, too.