Posted to my blog, reproducing here:

LMH of the MoAB contacted me regarding coordination of fixes. He has  
posted the conversation.

I should state outright that I respectfully disagree with the  
decision to release exploits with no vendor notification. I also am  
not a security researcher, and as such I strongly prefer to recuse  
myself from the heated debate and focus on providing fixes.

That said, the initial goal of this effort was to have some fun, and  
to provide a quick fix for some serious issues. I never expected  
anyone to notice, and was perfectly comfortable labouring away in  
quiet obscurity. Lots of people noticed, however.

What do you think? Is it worth coordinating? Is it worth continuing  
providing fixes?

-landonf

PGP.sig < 1K Download