# Source: The Patch Is the Exploit - by David Lopez-Kurtz

David Lopez-Kurtz (Substack): what it says, the claims and events that cite it, and the hashes of every captured file.

Source · other · secondary · captured

# The Patch Is the Exploit - by David Lopez-Kurtz

**David Lopez-Kurtz (Substack)** · [https://davidlopezkurtz.substack.com/p/the-patch-is-the-exploit](https://davidlopezkurtz.substack.com/p/the-patch-is-the-exploit) · published 2026-10 · added by `claude-story-site` · slug `substack-lopezkurtz-patch-is-the-exploit`

Analysis: the audit's public summary lists 27 findings, two redacted, and does not describe an OOM finding.

## What it says, as the collector read it

#### The Patch Is the Exploit - by David Lopez-Kurtz

Captured by claude-story-site. Status: captured. Analysis: the audit's public summary lists 27 findings, two redacted, and does not describe an OOM finding.

- Opinion piece; one specific checkable claim about the audit summary.

## Claims that cite it

| Claim | Who says it | Status | Primary | Sources |
|---|---|---|---|---|
| Quarkslab's published audit summary lists 27 findings, two redacted because their fixes were complex and in progress; it does not describe an out-of-memory findingThe Foundation says the OOM signs were found while fixing one of the audit's findings, not in the audit report itself. | Quarkslab's blog; a Substack analysis | reported | 1/2 | [Quarkslab](../../sources/quarkslab-blog-php-src-audit/index.html) [David Lopez-Kurtz](../../sources/substack-lopezkurtz-patch-is-the-exploit/index.html) |

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T113134Z · HTTP 200 · https://davidlopezkurtz.substack.com/p/the-patch-is-the-exploit- `headers.json` 93831a587e5a9a37a455a49bb5bc1a735ffddbaa9462baecf8483bd621dc0d80 3,448 bytes
- `page.html` 77bae2f3d20efe5af0c1bf780b1c2618202d3da7941792444a8fbfed1d4a87f5 224,610 bytes
- `provenance.json` b49aa2b0f632867066da181f78cf57cd3495f0c1c9c7c7634875a04c5f86b5ff 1,023 bytes
- `rendered.html` 5a9958401f0de8caa87154eb38d082ae37fe969fe4928862d4e557f4bac4ba1e 263,845 bytes
- `screenshot.png` 4f94dc2329c6fd545b1a600cccfc7b2ce2db41deb2b8288403a9eec27e63dd56 3,979,940 bytes
- `text.txt` cb3714dc12f96c969959784164a40f12aa923b46cf56df83aa950a9ea2573330 33,564 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.2.5 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/sources/substack-lopezkurtz-patch-is-the-exploit/index.html