@luckytran Haven't there been cases where the panic reaction of the public from a disclosure caused more damage than that disclosure could have prevented?
Harm reduction might be more important that adherence to the literal truth. The "every gun is loaded" useful untruth.
I do wish the CDC an AR DOH did better tracking for my area, tho.
@luckytran Surely there is some time lag while you gather/compose the "context and complexity" communication where you either need to hide the information or release it without that additional guidance?
Is that "extremely harmful" or simply "responsible disclosure"?
Coming from IT, I know there's some problems with responsible disclosure, but in most cases it seems better than just announcing exploits unrestricted as soon as they are discovered.