His attack came on the 29th April - yet there were Snort signatures on the 21st April (42329, 42332, 42340) for DoublePulsar, and before that 14 March (41978) for one of the vulnerabilities.
Despite his much lauded protection, I find it odd to believe that he's not running Snort, and the lack of actual specifics make me believe this is really a piece for the mentioned Israeli security company with a "blackbox" IDS.
Despite his much lauded protection, I find it odd to believe that he's not running Snort, and the lack of actual specifics make me believe this is really a piece for the mentioned Israeli security company with a "blackbox" IDS.