Simultaneous Discovery of Vulnerabilities

In the conversation about zero-day vulnerabilities and whether "good" governments should disclose or hoard vulnerabilities, one of the critical variables is independent discovery. That is, if it is unlikely that someone else will independently discover an NSA-discovered vulnerability -- the NSA calls this "NOBUS," for "nobody but us" -- then it is not unreasonable for the NSA to keep that...