I contend that the fact that the very same people are reporting bugs does not mean that they are the only ones finding them. Nor does it mean that only an expert might find them. Nor does it mean that all experts would be inclined to report them.
Great. Based on what evidence.
Didn't a couple of the recent IE holes come to light because they were first publically found in the wild?
BB
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
