Hacker News Reader

When making security patches it’s often best to leave those details out, as otherwise it’s used as a guide for bad actors

The bad actors already exploit them.

The really good bad actors already exploit them. The eager bad actors with less skills look for guides.

How do you know every bad actor already knows how to exploit it?