For your amusement, let me quote a selected phrase from a #curl related hackerone comment I just submitted.
"IT IS AND WAS NOT A SECURITY PROBLEM. You are still wasting our time."
(The reporter reported he could access the git repository using .git on the curl.dev site. A static site with a public git repository. Shocking.)
Sorry, but sometimes things need to be said using all caps.
p
in reply to daniel:// stenberg:// • • •@bagder
daniel:// stenberg://
in reply to daniel:// stenberg:// • • •this reporter has 2800+ reputation on hackerone (which is rather a lot) with numerous claimed verified vulnerabilities in his track report but apparently felt terribly hurt when I immediately shut down this nonsensical claim.
Sloppy reporting should be stomped down.
Leah
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to Leah • • •spv
in reply to daniel:// stenberg:// • • •