The Roundup came across a thoughtful take on the QuickTime flaw revealed at CanSecWest last week, now found to affect numerous web browsers.

Information Security Sell Out brought up a lightning rod topic this week: vulnerability management ethics.

The Sell Out questions whether a firm, in this case TippingPoint, is engaging in bad business by allegedly using the discovery of a flaw as a marketing opportunity. Did TippingPoint put Mac users at risk by offering $10,000 for discovery of a Mac flaw, thus practically ensuring one would be disclosed? And what if TippingPoint mishandles the newly purchased vulnerability?

Scroll down to the discussion section; a back-and-forth ensues.