Who knows how many attackers had found this vulnerability and had already been using it prior to this research finding it?
Argument from uncertainty is not a good way to reason about this.
I could equally ask: "Who knows how many attackers learned about this vulnerability from this disclosure, and used it before the distributions fixed it?"
well now everyone does, so the irresponsible disclosure makes it significantly worse.
Argument from uncertainty is not a good way to reason about this.
I could equally ask: "Who knows how many attackers learned about this vulnerability from this disclosure, and used it before the distributions fixed it?"