Is there any credible primary source for this exploit being real?