An update on Fedora's "issues"

That depends on what the security issue actually is and who is affected by it. Full disclosure
is attractive when I'm the one affected, but if the problem solely affects the Fedora Project
entity then they have a right to restrict information as they see fit.

However, it's pointless to speculate at this stage (and believe me I've been searching the
lists and bug-tickets for possible clues!) and may be something mundane involving running out
of resources for crucial infrastructure servers or completely broken packages being made
available for updates. It's hard to guess why such causes would not simply be stated as a
reason though.

Full disclosure only works when you are able to disclose a work-around or some kind of other
fix. If you disclose and there's nothing (or only very painful solutions) that people can
implement, that's a pretty bad idea.

>We'll really just have to wait until they disclose what happened. If this turns out to be a
security issue, I don't think anyone will ever trust them again (given the lack of
disclosure). OTOH, it could just be failed hardware. Hard to tell without some actual
information.

"Please don't update" with failed hardware? No, if the hardware failed they'd just let it go
("server is busted, please use a mirror"). This smells much like the Debian intrusion in July
2006.