Linking to a fix is redundant? Ah, got it so full disclosure is redundant. So full disclosure is good except when it is bad. Okay, would you like to redefine any more of your points?
Here, lets look at this.
If the “Month of Apple Bugs” project had given us advance notice of the security issue, we would have posted a fix sooner; as it was, they sent us notice at 11:15am and (as you can see) we posted this fixed release a few hours later.
We’re not proud to have had a vulnerability in the first place, naturally, but we are proud of our response time! (Now I guess we’ll see how quickly they respond to our fix, updating their workaround section to point people at our fixed release.)
link
So they give them "warning" at 11:15 am and the fix took a few hours. Lets look at it this way. The premise is that by not giving developers a heads up and instead trying to "teach them a lesson" that they will be ashamed and make a fix fast because apparently they either need motivation or something similar. Keep in mind this is a not a developer the size of Apple.
Lets change something, what would happen if they instead gave them 24 hours notice. One of two things will happen. Either a) they will release an patch to fix the problem in a "few hours" (maybe slightly more due to having a "few" more hours to do things like test for new bugs) or b) they release at the same time as they did if they were given no information until 11:15 am of the day the bug was publicly released.
So, what is the net difference by giving them even a tiny bit of warning? Well, possibility b looks the same as what happened but relies on the assumption that developers are lazy and need to be taught a lesson. So, no real difference and in fact provides real evidence that developers are indeed no good and lazy (how dare they take more than 24 hours to patch a bug). This would do much to bolster the movement that developers need to be more responsible/taught a lesson or whatnot.
Of course, there is that little possibility called a. It makes you wonder if they could have released the fix much sooner if they were notified. A week? A month? However long MOAB was sitting on the bug compiling a list of ammunition for their crusade most likely.
Basically, MOAB only showed how they were so desperate to teach Apple a lesson (and I guess everyone who doesn't share their opinions) that they had to resort to targeting third party developers and then being deceptive (I'm using the definition of deceptive that doesn't include implying that these were all Apple or even mac specific bugs since I'd rather not get into a semantics argument).
Also, I have a hard time taking you seriously at all when all you can put forward is that I'm "whining" etc because I pointed out a contradiction in your crusade to force the world to understand.
I hope you eventually grow past this desire as it really is self defeating.
