For example, the Tor network has recently been hit by a reveal of a major exploit in a research paper.
Isn’t publishing the details on the exploits completely counter-productive as the developers of Tor can then find the exploit and issue a fix? Would it not be better to not publish a paper and instead work with the authorities?
For the record, I don’t have anything against Tor as I think anonymity can be a good thing if the user doesn’t do anything illegal. Unfortunately, not everyone is like this. Secondly, I am also aware that research companies like to publish papers to increase their reputation within the community but I am asking if their hard word would be more effective if they didn’t share their results with everyone.
This is mostly out of curiosity and may be considered a *personal-opinioned question* in which case I will happily delete this post.