This paper addresses the ongoing debate over disclosing information about software vulnerabilities through an open forum. Using a game-theoretic approach, we show that full public disclosure may be an equilibrium strategy ...