Comment by zb3

What is the solution implied here? Attackers - whoever they are - already have them, so perhaps it's time we close the patch gap instead.