Hector Martin

Calm down. I'm not saying he's got nothing to offer, I'm saying he clearly already doesn't care about what others think re:disclosure.

It's literally impossible to please everyone on this front. Like I said, however you do it, you get called an asshole. It's demotivating.

That it is. This isn't unique to infosec though. Plenty of contentious topics across, well, everything.

Burnout in this area is a real issue though. Some of my acquaintances - who have made massive contributions - contribute less because of it

If it's evil and assholeish to disclose irresponsibly, what would you call demotivating people and driving them to not disclose at all?

Hey, I never claimed not to be an asshole :-) but really I'm just annoyed he put his paper ahead of everything else.

I appreciate debate about disclosure timelines and even FD is fine, but just why on Earth would you say nothing for months.

Heck, the paper would be *improved* by including relevant discussion about vendor responses and fix approaches and indeed many do so.