> In such situations it is in the public's best interest that information about the vulnerabilities be widely disseminated This assumes many facts not in evide

> In such situations it is in the public's best interest that information about the vulnerabilities be widely disseminated This assumes many facts not in evidence. It may, in fact, be the best thing. But security people, as a rule, are strongly biased to love things that increase the social standing of security researchers, and chaos does that. There are other ways of pressuring the car companies. I'd like to see companies failing to fix disclosed security holes in safety critical applications in a certain period of time face monetary damages, even without need to show harm was caused. But lobbying is boring and getting on the top of HN is fun.