3 ms·
It's also worth pointing out, given the almost two years of seemingly valuable contribution, that this could be a real person who was compromised or coerced int
by ajross 3y ago
It's also worth pointing out, given the almost two years of seemingly valuable contribution, that this could be a real person who was compromised or coerced into pushing the exploit.
- stefan_ 3y agoIt’s also worth pointing out that parts of the RCE were prepared almost two years ago which makes this entirely implausible.
- ajross 3y agoWere they? The attacker has had commit rights for 1.5 years or so, but my understanding is that all the exploit components were recent commits. Is that wrong?