Much debate has been given as to whether computer security is improved
through the full disclosure of security vulnerabilities versus keeping
the problems private and unspoken. Although there is still tension
between those who feel strongly about the subject, a middle ground of
responsible disclosure seems to have emerged. Unfortunately, just as
we've moved into an era with more responsible disclosure, it would seem
that a market has emerged for security vulnerabilities and zero day
exploits. Disclosure of Security Vulnerabilities: Legal and Ethical
Issues considers both the ethical and legal issues involved with the
disclosure of vulnerabilities and explores the ways in which law might
respond to these challenges.