What are the pros and cons of making a system vulnerability public? Is it better to keep these vulnerabilities secret until they can controlled or should they be disseminated?