> ... such as running the damn thing on a known-vulnerable box/VM, ... But in the case of Flame, wasn't that (one of) the big problem(s)? That the researchers

> ... such as running the damn thing on a known-vulnerable box/VM, ... But in the case of Flame, wasn't that (one of) the big problem(s)? That the researchers didn't know what, exactly, comprised a known-vulnerable host?