These are interesting "security flaws," given the level of access an attacker needs to exploit these.
I wonder what (other) security professionals have to say about this white paper.
I wonder what (other) security professionals have to say about this white paper.
There's a big difference between a break and enter, and "The airbnb guest stole my lamp when he left!"
It's similar to what Peach (Fuzzer) did after they've (co)"discovered" Heartbleed however that was handled much better.
There is a good number of red flags all over this site, including the non-existent disclosure timeline, I would say the chance this is for real is basically 0.