Re: Browsers are getting _far_ to complex
Christian is right - nearly a year to fix a security related bug *is* too long. Even if the privileged Bugzilla account had been secure, a bug can be discovered by more than one person.
If they can't fix it within a sensible timescale they should assume it is being exploited and at least warn the user community. We can argue what sensible is, but it is much less than a year.