[Fargren]

It also let's people prepare for it and create solutions. It's not a bad policy, and not releasing the exploit can in many cases be more harmful.

[RexRollman]

Exactly. Disclosure is best.