[pilif]

> This seems to be a very basic attack, wondering why this attack vector wasn't publicly known much earlier...

in hindsight everything looks very basic. If this was so simple, why didn't you come up with it?

[tptacek]

Maybe "basic" isn't the word I would use, but I thought the same thing. This is one of those vulnerabilities that is completely obvious... in retrospect.