Drupal sites had "hours" to patch before attacks started | Hacker News Reader