You may feel the security flaw is an obvious red flag that should have peoples' hair on fire but not everyone understands what you do. Horseshit. Having a publ

You may feel the security flaw is an obvious red flag that should have peoples' hair on fire but not everyone understands what you do. Horseshit. Having a publically-exposed HTTP endpoint that enables arbitrary code execution is so goddamn stupid that even an intern with room-temperature intelligence should've been like "Hey, isn't this a possible vulnerability?" I'm all for the principle of charity, but if you are in a field where people are counting on you not to be a rank amateur then you better step up your game and not be surprised if they call you out on your incompetence. I'll humor a kid who screws up carving a turkey--but if they claim to be a neurosurgeon, they damned well better have a steady hand.