3 ms·

So instead of just emailing him, you bashed him publicly on Twitter, then shared it with all of us here. I'm not impressed.

• ghurlman 15y ago
  No, warned people here and on Twitter.
  • qeorge 15y ago
    Maybe I'm naive, but there's two scenarios: 1) This is a big deal, so he shouldn't be advertising the vulnerability until its fixed 2) This isn't a big deal, so he's giving the guy a hard time for no reason So yeah, "warning people" doesn't cut the mustard with me. This is grandstanding.
    • edw 15y ago
      The performance of the site was so poor when I signed up—and received my password—as part of a labyrinthine, ill-conceived sign-up process—that I couldn't find a way to send feedback. So I just fumed until I forgot about it. A week or so later, I read a comment on Twitter, at which point I replied in an attempt to dissuade people from signing up. Any developer who writes code that stores a password and then emails it to me is doubly guilty of gross incompetence.