Who the hell is ice-wolf?
One of such vulnerabilities was recently - and quite enthusiastically, if I say so myself - advertised by Eevee
Tell 'em the rest of the story, Yak. He came to you and you told him to get lost, you didn't care.
It's also very, um, telling that icon of his. Video games has ruined a generation of computer scientists. Not that there was ever any potential from the FA crowd, but yeah.
Someone who chose, in my view, to essentially extort immediate fixes out of FA for the issue he thought, in my place, was the most important of things to fix on FA. Dude, it's been there for years; another month or two until I eventually got to fixing that on a regular schedule wouldn't have changed anything. I actually had a big thing planned in that regard.
Yep, and Dragoneer's going to come up with a better site, release Ferrox, and bring about furry nirvana on Earth this weekend. After he gets done with his TF2 server, of course.
Someone seriously needs to come up with a nasty-ass Flash virus or something for FA. Seems like that sort of action is all they listen to anyway.
Also, sorry to keep editing this, but the more I read from his post, the better it gets:
Someone who chose, in my view, to essentially extort immediate fixes out of FA for the issue he thought, in my place, was the most important of things to fix on FA. Dude, it's been there for years; another month or two until I eventually got to fixing that on a regular schedule wouldn't have changed anything. I actually had a big thing planned in that regard.
I guess I'm not sure what specifically he's discussing, but I'm pretty sure that it was common knowledge that FA had vulnerabilities of this nature. It's just that no one ever did anything with them, by some stroke of luck. The new comment code
also had those problems, which is what is new. And rewriting 60% of FA? Assuming that's not some kind of ridiculously-exaggerated statement, you know, it comes down to the fact that you shouldn't be using that code base, period. But since Dragoneer is still mentally fifteen, and manages his site accordingly, and since they will not allow anyone competent to help, here we are.
Call it security through obscurity or any other buzzword you wish
Wow. Well, I don't know about you all, but when I think of a well-defined and widely-accepted concept such as "Security through obscurity", I think "buzzword".
