Hard to say it, but it's kinda truth.

When an exploit is found a lot of times it is picked apart to death, which is a good thing, that is as long as you've plugged the hole. In an ideal world an exploit will be found, remedied and then talked about- in the real world however exploits are found, fixes are deployed, exploits are talked about and then fixes are installed.

With the large mass of websites on open source LAMP platforms and open source applications like Firefox where source code is also availible, full disclosure becomes a real issue.