5 ms·
So if I got this right, this is the order of how things happened. 1. Egor finds a vulnerability and reports it. https://github.com/rails/rails/issues/5228 http
by T-Winsnes 15y ago
So if I got this right, this is the order of how things happened.
1. Egor finds a vulnerability and reports it. https://github.com/rails/rails/issues/5228 https://github.com/rails/rails/issues/5228
2. It gets ignored and he is being called a troll.
3. He proves that he was right by doing a harmless commit to to the rails master repo.
4. The vulnerability gets fixed quickly as it got the focus of the community.
5. His account gets suspended
Not sure I agree with the suspension.
- lunarscape 15y agoExcept he also opened a closed issue, compromised 2 other accounts and impersonated another user, something he admits to in his blog.
- adharmad 15y agoWere his other actions (impersonating another user, compromising other accounts) also to demonstrate vulnerabilities or just unnecessary semi-malicious actions on his part?
- lunarscape 15y agoThey were not malicious but, imho, they crossed the line. It's not be too difficult to justify something simple like opening a closed issue but once he did things that interfered with other peoples accounts that's the point at which I feel no sympathy for for him being suspended.
- lunarscape 15y agoDownvoted for pointing out what the OP conveniently ignores? Or downvoted for daring to even appear to go against the hivemind? Edit: I guess that answers that question. As pointed out in other threads the response to this has shown that HN is no different to other sites and not in a good way. I wasn't even being critical in my original comment but the very suggestion of dissent against the mainstream response is deemed non-conforming enough to warrant anonymous downvoting. That 'hivemind' mentality is the reason I left Reddit. At least others have pointed out this more eloquently than I in relation to this incident.
- krschultz 15y agoI downvoted you for trying to make a big deal about opening a closed issue. That's one of the weakest arguments I've ever seen.
- lunarscape 15y agoIf you actually read my comments you would see I say the exact opposite- that's it's easy to justify opening the issue. My original comment just highlighted the fact the parent conveniently left out details, simplifying the narrative intentionally in my opinion.