obvious research is obvious

from here

i wonder how much money HP spent determining the obvious. of course exploit writers use the information in patches to write exploits. what do you expect them to do when you point out where the flaw is?