[kragen]

You mean DUAL_EC_DRBG.

He's correct that if people generated their own ECC curves instead of using standardized curves, then standardizing maliciously chosen curves would cease to be an attack vector.

That doesn't of itself imply that the pros of standardizing curves do not outweigh the cons, but it is a con of standardizing curves.