80h ago we had no info other than a vague post from the php page saying a massive security flaw will be announced tomorrow. And a post from a PHP core dev saying shut it all down.
Everyone with inside info was sounding the alarm so the rest of us had to take it incredibly seriously.