The exploit has been fixed. We've learnt our lesson. Obviously we won't be posting our latest findings here anytime soon.