> Are there any well substantiated facts which show that full disclosure > harms the situation? Yes, and several have been posted here and in the newsgroups over the last year. Several have also been presented at the FIRST conferences. Ask anyone on a response team, where they deal with dozens of breakins a week (or a day, in some cases), and they can give you lots of evidence (assuming their internal policies allow them to disclose details of cases). --spaf