Las Vegas has been buzzing with questions about the government's process for disclosing newly discovered software vulnerabilities.