pull down to refresh

The more I look into it, the worse it seems.

Into what? Toxicity? nvk challenged me once for agreeing with him.. lol.

What I am extremely worried about are all these other people that are now dancing on the coinkite grave. Each and every one of them is using this as a marketing oppty. But even while they may not have been the lowest hanging fruit, I know teams with higher professional standards than many of these that got rekt.

IRL opti sent out a note with a vuln+PoC to a dev team last month and got a mail back: "thank you, we're already working on it, we'll credit you along with the others". Key thing to note, that s in others. That didn't happen much before. I can't remember ever sending out a dupe on < 1 week old code.

reply

Me too. It’s not fun getting stolen from or having something you worked on your whole life get destroyed because of some low character thief. The person(s) who found this could have easily disclosed this and had coinkite do a patch and save its users from getting rekt.

reply

I am definitely with the crowd that says "this should have been prevented". But I am also part of the (apparently extremely small) crowd that failed to help preventing it - voluntarily, but that does not make it less a bitter, bitter pill to swallow.

However, what I am not cool with is the grave dancing, the offhand comments, the shit slinging that took just a few hours to start and every time I opened yakihonne the past few days it looks like it is still intensifying, so I no longer go there. I wish I could believe in karma but I don't. If I did, I'd sleep better, knowing that all these guys are going to get what they deserve.

reply

I'll say more after doing more research.

reply