Comment by michaelbuckbee

Am I wrong in assuming that Vupen's customers are bad people (for values of spam, trojans, bot-net, phishing bad)?

I'm trying to think of why else they wouldn't disclose the protected mode bypass error, but instead keep it "private for our customers".