I don’t know if you lost format or context moving from Disqus but I found this largely unreadable. Of the parts that were readable, I find myself strongly disa

I don’t know if you lost format or context moving from Disqus but I found this largely unreadable. Of the parts that were readable, I find myself strongly disagreeing with a majority of your paragraphs, notably: - I don’t see how Crowdstrike vs NSS has any relevance in this at all, especially given the preamble on Troy’s site. Reasonable people can disagree on the outcome of that case (as a former Crowdstrike employee, I can acknowledge my own biases there), but I just don’t see how it’s relevant. - Similarly, I don’t see how formally recognizing Torvalds and RMS does anything meaningful, and I can think of a dozen other researchers who have had objectively more concrete contributions to SECURITY than those two. - Whitelisting every url pattern isn’t going to ever be a viable solution - in large part because the white lists will eventually be regexes and people are bad at regex.