Security Flaws Found in WinNT VPNs

A story on MSNBC discusses a recently discovered bug in the Windows NT Virtual Private Network services. From the article: "We were able to sniff passwords, eavesdrop on the networks, and passively do traffic analysis," said Bruce Schneier, president of Counterpane Systems Inc., of Minneapolis, Minn. "Any Microsoft NT server on the Internet is insecure."

Bruce goes on to state that this is a perfect example of why all security related protocols should be developed publicly. What do you think?