The guy who posted the CVE IDs early: https://news.ycombinator.com/item?id=50183326 (dead comment)