Just because the bug was discovered doesn't mean it's been fixed in deployment. ;) Remember, as well, the bug was only half of that paper's findings; they also

Just because the bug was discovered doesn't mean it's been fixed in deployment. ;) Remember, as well, the bug was only half of that paper's findings; they also found fundamental flaws in the method. Besides which, there are widespread methodological flaws that IMO make more difference.