johnyma22
johnyma22@lemmy.ml
Joined
1 posts • 32 comments
Security related issues should go through responsible disclosure and it’s up to the maintainer to provide such a process or the recently flurry of “opportunistic whitehats” will continue to spam your issues and require triaging…
Github provides a process for this under the “Security” tab: https://github.com/ether/etherpad-lite/security as an example…
I find that by having a documented process it filters out a decent amount of time wasters.
Best part of Gondwana
I know this isn’t the core of the story but I’m kinda proud of my country (The UK) for not fucking this up.
I think the UK Justice system did it’s job here, albeit keeping him detained for a lengthy duration to do it.