[fidget]

Doesn't particularly make a difference, given that this issue is about users not upgrading (for whatever reason) their windows XP installations. Would the exploit having being disclosed by the NSA or by someone else have changed the fact that these users would not have upgraded and gotten a patch?

[jrimbault]

Can I have my cake and eat it too?

People should keep systems under their responsibility up to date.

And people should disclose security vulnerabilities.

[bsder]

Um, a LOT of drivers broke on the change from XP to Vista.

If you controlled a piece of hardware, you may not have had a choice to upgrade.

The lesson is that closed-source is anathema to a good security policy.