The idea that a US company is allowed to publicly talk about and release these bugs is a very new thing.