8 ms·

Time from exploit to fix in production: < 1h. On a Sunday morning. I'd buy Github stock if I could.

• pyre 15y ago
  It doesn't hurt that the vulnerability was already discussed in a bug report by the 'attacker.' I'd imagine it would have taken a longer time had they needed to track down how exactly this happened, though I guess I'm making an assumption on what their logging/auditing/reporting is like.
  • jberryman 15y ago
    Right, I'm kind of baffled by the posters on the bug report calling this a "0-day" exploit.
• sausagefeet 15y ago
  At the very least you'd probably be getting it on the cheap at that point.