Open source software vulnerabilities exist for over four years before detection | Hacker News Reader