Can someone explain the disclosure procedures that were actually followed? It seems like everybody freaked out at the same time. AWS had apparently already protected all but a "small percentage" of their VMs. If there was some kind of responsible disclosure taking place, allowing vendors time to upgrade, it seems like it wouldn't have had so much impact.