[shoeboxam]

In addition, being a security researcher doesn't give you a license to put the public in any form of danger! That's why we have private disclosures.

[geofft]

The researchers did disclose it privately. As always, the believable pressure of public disclosure makes the process work.

https://twitter.com/0xcharlie/status/623492229714313216