There is no bug nor security hole here.  If I wanted to find DNN sites I could just as easily use a search like http://www.google.com/search?hl=en&q=allinurl%3A++%22%2Fctl%2FTerms%2FDefault.aspx%22&btnG=Google+Search or http://www.google.com/search?hl=en&q=allinurl%3A+%22%2Ftabid%2F36%2Fdefault.aspx%22&btnG=Search or http://www.google.com/search?hl=en&q=allinurl%3A+default.aspx+portalid+tabid&btnG=Search or http://www.google.com/search?hl=en&q=allinurl%3A+default.aspx+ctl+mid&btnG=Search or any of a dozen other searches.

Security is not obtained by completely hiding all traces of your application signature.  That is security by obscurity and it is fundamentally flawed.  Security is obtained by identifying holes in your application and closing them.

Shawn,

Joe and dnninstalled are correct, this is not a security flaw, and I would never purposely post a security flaw without giving the core team a chance to address it.

If the core team is given a reasonable time to address real security issues, and it they are not addressed, then posting it publicly is in the best interest of everyone .

By the way, it's up to 14,100 now.  Looks like the climb may be leveling off but it's still moving.