3 ms·
Even if one bought the ridiculous notion that private disclosure of vulnerabilities is a good thing, why would you think it would be necessary to privately "dis
by nknighthb 13y ago
Even if one bought the ridiculous notion that private disclosure of vulnerabilities is a good thing, why would you think it would be necessary to privately "disclose" to anyone what Digital Ocean already publicly documents in their API?
- yeukhon 13y ago[edit]: okay I misunderstood the issue here. Some day I would forget to close my home door with a bang. No home invasion yet because nobody notice that the door wasn't fully closed. Now I am telling people I will forget to close my door, and I will get an invasion. Some people's repo have password committed. It only takes someone to google that to find out. If someone posts that on HN, yeah, it's on the web anyway, it only takes one person to make my password known instantly.
- nknighthb 13y agoYou are extremely confused. Digital Ocean does this deliberately and already publicly documents it. It is intentional. This is not a bug report to Digital Ocean or any other PaaS. It is a request for a third-party library to support an option Digital Ocean's API provides.
- yeukhon 13y ago[edit]: okay I misunderstood the issue here.
- jlgaddis 13y agoThis is the equivalent of complaining very loudly and publicly that someone broke into your house after the police warned you, "Hey, you shouldn't leave your door standing open -- someone might break in."
- deleted 13y ago[deleted]