Vulnerability disclosure is a touchy situation for many. Some feel that it is best to notify vendors once a vulnerability is discovered and work with them on an announcement timeline. Others feel that once a vulnerability is discovered, it is likely other people (with potentially malicious intentions) already know about the vulnerability and it is in the public's best interest to disclose the vulnerability as quickly as possible.