Exactly, just wanted to link this as well. There's of course nothing wrong with pointing out already known security flaws, but it's good practice to mention wh

Exactly, just wanted to link this as well. There's of course nothing wrong with pointing out already known security flaws, but it's good practice to mention when this is a well known thing and reference prior work - which the post by kraken does not do.