the more I learn about the timeline for the #PHP vulnerabilities, the more the whole thing starts sounding like a manufactured crisis for fear marketing purposes on the part of AI companies

that's not to say that the vulnerability isn't serious - it is! you need to update! - but it looks in absolutely every way like the AI companies involved used a legitimate vulnerability in the most irresponsible and malicious way possible, with their primary goal being not to keep people safe, but to paint themselves as saviours with exceptional capabilities

the way this disclosure happened is not how legitimate security researchers - institutional or otherwise - do things, and these companies have 100% put people in danger for their own gain