If they can't manage to fix a severe security hole within 90 days, I'd say that they deserve to have their credibility destroyed.

I'm with GP on that we need more programs like project zero.