7 ms·

No, warned people here and on Twitter.

• qeorge 15y ago
  Maybe I'm naive, but there's two scenarios: 1) This is a big deal, so he shouldn't be advertising the vulnerability until its fixed 2) This isn't a big deal, so he's giving the guy a hard time for no reason So yeah, "warning people" doesn't cut the mustard with me. This is grandstanding.
  • edw 15y ago
    The performance of the site was so poor when I signed up—and received my password—as part of a labyrinthine, ill-conceived sign-up process—that I couldn't find a way to send feedback. So I just fumed until I forgot about it. A week or so later, I read a comment on Twitter, at which point I replied in an attempt to dissuade people from signing up. Any developer who writes code that stores a password and then emails it to me is doubly guilty of gross incompetence.