We checked them as claims came in to decide whether early disclosure was necessary. There were no reports of successful attacks, these were early and naive attempts. Furthermore, we were still waiting for distros to…
This is absolutely not true. There are several things that leaked: - The fact that there's a release, the CVE numbers, CVSS score and date/time (though wrong). - Calif's video. - Some advice from the mitigation…
It's not possible because PHP has a LALR(1) parser but this would require arbitrary lookahead.
We checked them as claims came in to decide whether early disclosure was necessary. There were no reports of successful attacks, these were early and naive attempts. Furthermore, we were still waiting for distros to…
This is absolutely not true. There are several things that leaked: - The fact that there's a release, the CVE numbers, CVSS score and date/time (though wrong). - Calif's video. - Some advice from the mitigation…
It's not possible because PHP has a LALR(1) parser but this would require arbitrary lookahead.