In-brief: a survey of security professionals finds they are willing to circumvent vendors who do not respond to reports of security holes in their products.