How did you verify if the patched system is not affected anymore? I'm really curious what means the users have to verify the effectiveness of such patches.