Comment Re:Only bug left. (Score 1) 31
We have excellent data on vulnerability research going back decades. Researchers do find the same sets of bugs when they look at the same code with the same motivation. And it never happens within hours of each other. It's a slow diffusive process, that progresses on the scale of weeks and months.
Remember the disclosure embargo arguments we've had not so long ago? The idea that a "responsible" security researcher should quietly tell the company about a bug, and give them time to fix it over a couple of weeks, before publicising it? That debate (whichever side you're on) made sense because it does easily take weeks for random researchers to find things, provided the first discovery remains hidden.
In this case, the coincidence of finding the same bug within hours independently is anomalous.