Exploits no human would find shouldn't be published for PR
Quote
These are exploits that nobody, no human being was ever going to find. And so there is no reason to publicly disclose these things. They should be private for as long as possible, as long as humanly possible.
Episode 260: Tennessee Trickshot (episode page, opens in a new tab) 00:12:25 (play audio from this timestamp, opens in a new tab)
Voice-matched
Summary
Dave is fed up with AI security startups dropping proof-of-concept exploits on Twitter and Hacker News for headlines and funding, which forces everyone to panic-patch. Bugs like the recent Linux kernel privilege escalations were ones no human was ever going to find, so there's no reason to disclose them publicly. They should stay private for as long as possible.