[parktheredcar]

I feel like with most security research the only way to get $INDUSTRY to take things seriously is if there's an easy tool for anyone to use that exposes the weakness, like firesheep with https. For individuals driven by money, you need to get their customers riled up. So in a way, developing open tools to exploit weaknesses is a way of countering the weaknesses in the long run.