The Ars Technica article is nothing short of offensive. It's an article that does not need to exist. We need to sit down and have a nice long talk about the ethics of fear mongering in the security industry, as well as the idea that a "well-respected researcher" would not only hype up his findings, but not even reveal his findings until a conference that he organizes. Talk about a conflict of interest.
I'm willing to give Dragos the benefit of the doubt here and just assume that Dan Goodin has his head so far up his ass he can't see clearly and that Dragos has no intention of misleading people.
But having these issues for 3 years? Let's just say that extraordinary evidence needs to come out fairly quickly now. Or at least a massive correction of the hype here. Surely, in 3 years, someone else would have discovered this thing.