Wait a minute! If your security only relies on your code not being known, that is the screwup, not the other way around! Technology Review should know better than to potentially disseminate such a harmful notion.