This paper addresses the ongoing debate over disclosing information about software vulnerabilities through an open forum. Using a game-theoretic approach, we show that full pbulic disclosure may be an equilibrium strategy in a game played by rational loss-minimizing agents. We provide conditions...