We are fixing the vulnerability that led to the disclosure of this data, changing the passwords of the affected Yahoo!

ENGADGET: Yahoo confirms server breach, over 400k accounts compromised

It is typically legal for someone to disclose a vulnerability, even when the disclosure could serve as a roadmap for criminals looking to exploit the flaw, said Ms. Granick.

WSJ: Computer Experts Face Backlash

Apple has been notified of the vulnerability and a proposed fix with full public disclosure coming at the BlackHat conference on August 2nd.

ENGADGET: Safari exploit gives hackers full control over iPhones and possibly PCs and Macs

Until this transparency and disclosure is assured, I am skeptical of any claims of poverty and vulnerability on the part of the firms.

FORBES: Auditors Abandon Investors On Liability Limits