Whatever you want to tell people must not be that important if you can't have a human bother to write it.

The only way I see to disincentivise first to publish is public shaming. Damaging the very reputation they are trying to inflate.

This blog post does well to remind or educate only for everyone else who's interests are actually aligned with public good.

The joke is "keep undisclosed to give enough time for the maintainer to fix"

Here we are just like having waited for a few years for a fix already...

The independent researcher who published a proof of concept before the release did not.

Just to clarify that no actual PoC was published, just a demonstration video was floating about.

[dead]

TL;DR don't tell people something you don't want leaked?