[bawolff]

It is just as much the appropriate view now as it was in the 90s.

Attackers are not idiots. Once you have the commit, it is usually pretty easy to figure out, even just having the binary diff is usually enough.

[6thbit]

The binary diff?

[bawolff]

There are people who reverse engineer security vulns of closed source products by comparing the before and after of the compiled binary.