Microsoft obviously takes way too long to fix flaws, ... All researchers should follow responsible disclosure guidelines, but if a vendor like Microsoft takes six months to a year to fix a flaw, a researcher has every right to release the details.

It's not like any other flaw in IE?it's definitely different.

I am walking a fine line, but I am doing it very carefully because I am not disclosing actual vulnerability details, ... I do this to inform users that flaws still do exist in IE...I don't like it that Microsoft tries to give users a nice warm feeling that they are disclosing everything researchers report to them.

‎‎"When we look for flaws in others and point them out, we are doing them injustices." ~Tom Baker

The flaw which is hidden is deemed greater than it is

Conceal a flaw, and the world will imagine the worst