Hacker News Reader

The most terrible thing here is that OpenBSD usually does some full disclosure. This is sure going to be a nasty bug.

Why is this terrible? In any case, the software is open source so any security fix commit can also be considered as full disclosure.

But they didn't disclose the bug yet. The implication is that this bug is /so bad/ that it justified breaking the normal "just disclose it" approach.