"AT&T had plenty of time to inform the public before our disclosure. It was not done. Post-patch disclosure should be immediate -- within the hour. Days afterward is not acceptable," said Goatse ...