that any info on vulnerabilities not released openly to the public, will be released in secret to the hacker/cracker community. Publically released, this info forces MS to make the fixes. Elsewise, it will take more time for them to figure out what's happening if they're just waiting for the attacks. If the info is released privately to MS, they have already shown a tendancy to sweep these failures under the rug without giving it serious attention.