> I'm more curious why the top post in this thread is solely attacking the guy's character and not refuting any of his claims.
I read the blogpost and was left waning on the post actually making strong claims. "The biggest starred PoCs on Github are not viable exploits" does little satisfyingly justify "This vulnerability is not a big deal". The kind of malicious actors who would exploit this vulnerability at scale have no incentive to make their own versions public and without the author showing some serious expertise I see little reason to trust them at their word.
>I'd hate to upset all the 'this guy is Keyser Söze' internet detectives, but you've described 90% of posters here (including yourself).
Exactly, it however does not really apply to the actors warning of the exploit, from what I can tell there is at least some track record there.
I'm more curious why the top post in this thread is solely attacking the guy's character and not refuting any of his claims.
> An empty blog by a person that may or may not exist with no contact info.
I'd hate to upset all the 'this guy is Keyser Söze' internet detectives, but you've described 90% of posters here (including yourself).