[rando289]

"we still don't know how." No one is stating the obvious: we would know more if we had the source code.

[dubbel]

We would know more, but we wouldn't necessarily have an answer.

Reading the source code we cannot be sure that some vulnerable software was not updated quickly enough on some production system of theirs, or say anything about DNS poising etc.

[nikanj]

How? So far, the anecdotes are all over the place, and back date to weeks ago.