Comment on Follow-up to Carrot disclosure: ForgejoparentComments−throwa3562624moNo, the author is seeking attention. He is not doing forgejo or their users any favours by completely ignoring the rules of engagementhttps://en.wikipedia.org/wiki/Coordinated_vulnerability_disc...−throawayonthe4mocoordinated disclosure has always been a courtesy (with a deadline to motivate the vendor to fix their stuff) and i don't like how people seem to just expect it now
Comments
No, the author is seeking attention. He is not doing forgejo or their users any favours by completely ignoring the rules of engagement
https://en.wikipedia.org/wiki/Coordinated_vulnerability_disc...
coordinated disclosure has always been a courtesy (with a deadline to motivate the vendor to fix their stuff) and i don't like how people seem to just expect it now