This is exactly the issue from earlier on.

I also think people want to check it with a vanilla install, not with "poorly configured servers" etc.

I've seen a bit too much (early on, ive not checked anything in the last 12 hours) saying "exploit confirmed", no one is disputing that, just its efficacy - specially after the hype and vanity sites.