Leaking hints is the dumbest conceivable way to handle disclosure. It taunts the community and sets up a race to independently find the flaw. The race happens much more openly than the original research, meaning that flaws are incrementally disclosed, ensuring that bad actors of every skill level will get a crack at the attack before it's fully fixed.
Don't ever do this, at least not for a bug that matters. It would be better not to disclose at all than to do this.
Don't ever do this, at least not for a bug that matters. It would be better not to disclose at all than to do this.