Full disclosure

Bruce Schneier responds to Microsoft’s anti-disclosure movement in this week’s issue of Crypto-Gram (on Counterpane): “Culp [manager of the security response center at Microsoft] compares the practice of publishing vulnerabilities to shouting “Fire” in a crowded movie theater. What he forgets is that there actually is a fire; the vulnerabilities exist regardless.”