Hacker News Reader

I totally agree. We can sit here and posture all day, maybe it might justify our paychecks. Exploit it and show me why it’s fucked. Otherwise it’s just words

As Linus says: talk is cheap; show me the code

No. I think writing PoC and exploits is a waste of time and nobody should do it. PoC brings zero value to society and only helps criminals. If there is use-after-free, it is potentially exploitable and needs to be fixed ASAP. If you don't believe the theory, just keep using the vulnerable version.

I ain't paid to find exploits in PHP, but I will be fired if our shit gets hacked. So I'm taking down the servers until there's a patch.

There's been a patch since yesterday.

For any instance or any known instance?

As there is always the chance, basically unfair to go that far.

Bonus points put cryptocurrency private key on their server as bounty.