NSA discloses 91% of bugs it finds but doesn't say when it discloses them

With one answer from the NSA comes a myriad of questions.

In an effort to increase transparency, the U.S. National Security Agency (NSA) revealed in a press release last month it discloses 91% of vulnerabilities it finds in software made and/or used in the U.S. to developers. But the NSA doesn't say what it does before it discloses those vulnerabilities, or when it discloses them.

The NSA's press release notes that the remaining 9% of vulnerabilities are either spotted and patched by the developers before the NSA discloses, or are "not disclosed for national security reasons." Read more...