[palant]

Note: I am the author of this article.

Where did you get the idea that direct network access is required? To quote the article: “large applications interacting with websites in complicated ways.”

Most attacks can be launched by an arbitrary website. And given the number of people affected, this is way worse than any individual server being vulnerable. Besides, I’m definitely not going to look for server-side vulnerabilities without permission.