Hacker News Reader

Seems like the discovery of this vuln was a direct result of yesterday's discussion about HTTPS on apt here on HN (https://news.ycombinator.com/item?id=18958679).

Nope, I reported this bug several days ago. Funny coincidence though.

No. That would mean less then a day heads-up from the researcher.

It would be a really impressive turn around on the fix from Debian, though ;-).