>>> Or maybe someone didn't want to compromise Tor in public until the Tor project had a chance to address the issues.
To some degree, isn't this what the Black Hat conference is all about?
To some degree, isn't this what the Black Hat conference is all about?
The Black Hat conference is about promoting the security industry. DEFCON, on the other hand, is about promoting hacker culture. It's a lot more common to see 0-day talks at DEFCON because there's much less industry spotlight [and thus, fewer general business professionals that could get scared by some new attack being announced].
What these "researchers" were doing was just reckless. When it comes to Tor, lives are on the line. This kind of irresponsible disclosure is abhorrent, at best.