Indeed. The danger is that people will read "0 day" and start freaking out. If you actually read the post, you see a couple warnings signs: 1. They claim it's

Indeed. The danger is that people will read "0 day" and start freaking out. If you actually read the post, you see a couple warnings signs: 1. They claim it's part of a larger conspiracy and that people should sue Automattic. 2. The "vulnerable" filename is wp-att.php, as in AT&T 3. They point out that the MD5sums to trigger this behavior come from the words "remote_control" and "nsa" But even noticing that, I still felt the need to log in to my server and make sure the file didn't actually exist; when someone cries "0 day", it would be irresponsible of me not to, no matter how crazy they sound.