For context, see this submission: https://news.ycombinator.com/item?id=38727987

Commercial vendors had a 6 months window (and bounties), while open source developers learned about it after the talk was accepted. See https://zombofant.net/@jssfr/111618969359339789 for other community reactions.