1. As reported upthread, there was no press release to summarize. This was a story built on leaks from anonymous sources.

2. This is a Wired story republished on Ars, not actual Ars reportage.

I certainly agree that additional commentary from security researchers would be welcome, however.