Sybase stops publishing details of security vulnerabilities - and another manufacturer who doesn't understand security