Heffner, like most security researchers revealing dangerous bugs, argues that releasing an exploit may be the most effective way to draw attention to severity of the problem and convince both browser and router makers to fixthe fundamental vulnerability.
On the bright side, such substantial time frame suggests that the upcoming fix should also address other bugs like incompatibility with the desktop suite, weird loading behavior in thebrowser, and missing WMV video playback functionality.
When you find out that your Kryptonite bike lock can be opened with a Bic pen or that a bug in Java lets malicious websites take over your computer, thefix is in your hands: You send in your lock for a replacement or disable Java in your browser.