Ask HN: Should I publish Heartbleed statistics?

Hello HN, I've modified some public exploit code to scan a list of HTTPS hosts and calculate simple statistics. None of the data that the exploit retrieves is logged. I've run it on one list of hosts with OpenSSL/1.0.1 in their Server header, and am in the process of scanning a larger, more statistically significant list of assorted HTTPS hosts. The OpenSSL hosts have a 42% vulnerability rate. :( I made this with the intent of creating a "heartbleed monitor" website, but all of my friends tell me I'll go to jail if I publish these results. Do any of you have thoughts/advice? Thanks, Anonymous for now