Flutterby™! : Microsoft apologizes

In a move that completely vindicates full-disclosure of bugs and security holes, Microsoft has admitted that they knew of the latest IE bug for a week before it went public, despite earlier complaining that they first heard of the bug when it was announced to the public.

"We are obviously not going to respond instantly. We have to sieve the wheat from the chaff to determine how reliable the vulnerability warning is," said Laver. "Until we can investigate the issue, we are not going to issue a bulletin, as that would create a crying-wolf situation."

In other words: The only way to get Microsoft's attention is to publish the complete exploit, including code, otherwise they'll sit on it while they "sieve the wheat from the chaff".