Hacker News Reader

Okay that makes sense. I understood it as the interface wasn't exposed to anyone that could exploit it. However they meant that no exploit methods had been developed yet.

View on HN

The exploit methods that the researchers uncovered have not been provided to the world at large. You can bet that test kits are in the hands of large companies right now, to aid security patch development. If those test kits, intended for white hat purposes get leaked in any way, for any reason, it's out in the wild. That's not supposed to happen, and there's no way for the layman to know the status of a zero day in the wild, until explicitly reported as discovered.

Any company or project providing a patch, has a way of testing the validity of the patch. Those test kits can be weaponized, but not without a degree of skill. Anyone who tests software knows this.

Reply on news.ycombinator.com