This is done. A summary of the issue and apology can be found here: https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue

Thanks for doing this George! In addition to donating at https://iterm2.com/donate.html, what can HN users do to help you with iTerm2?

THANK YOU for being so awesome and responding to feedback so quickly. That is a breath of fresh air

Mistakes happen. Quick responses and honest apologies are always appreciated!

Thanks for the quick response.

How does this coincide with the 3.1.1 release though? I was still on 3.0.15 and there are new features and other fixes in 3.1.x. Do the new features and the other fixes happen to be reasonably tested and ready already?

3.1.1 is well tested. Everyone should upgrade. If you find regressions they'll be my highest priority.

Thank you for addressing this so quickly. Great find and great response.

I love iterm2. It's like I'm responding to a celebrity. Thanks for making mistakes.

You're awesome, and so is iTerm2. Thanks for the great work!

Great reaction and thanks for producing such a great piece of software, it's making my life better everyday.

Logging in to HN for the first time in several years to say thank you for your swift and responsible action.

Thank you for building the best terminal app in the world, and for responding to user feedback so quickly.

Thank you ! iTerm2 is amazing and this quick fix only proves it !

iTerm2 is the only terminal I like in every way. Thanks for that.

Thank you. Will you be releasing a new beta, too?

Yep. I'll put that out tonight.

Thanks for owning it and thanks for fixing it. Better response than you're likely to get almost anywhere!

Fastest fix ever.

Awesome, thank you for the swift fix!

Hooray!

Why didn’t you do this two years ago, when the first bug report about this was made? (https://gitlab.com/gnachman/iterm2/issues/3688) Or a year ago, when a second report was made? (https://gitlab.com/gnachman/iterm2/issues/5303) Note that the first bug report explicitly mentions the leaking of passwords.

Was it really all about the “level of concern”, as you say, and you wouldn’t have changed this without the exposure?

This is a deeply unkind thing to say to someone who donates their free time to provide a public good. George apologized for his oversight and fixed the problem. Take him at his word and thank him.

Please don't call this "oversight".

He was (made) aware of the problem and chose to keep the default.

Uhh, to be fair both reports were answered with appropriate concerns.

First made it sound like a very specific issue for that one user, and was given a way to disable it for him.

Second made it sound like an entire class of users would need it off, and an option switch was provided.

What do you think is more probable, that he intentionally left that hole open despite not directly benefitting from it, or simply that when he answered both original reports and provided an appropriate solution, he didn't fully think about the details and implications of what those issues meant?

Have you really never have a closed issue come back to you "went from bad to worse, abort!“ ?

Don't beat yourself too much about it. Yes this was a serious security issue from my point of view. BUT to be honest I would probably have done the same mistake and your reaction time was more than adequate.

Thanks for the amazing job you are doing on iTerm it's a joy to use.

The first app I download on a fresh OS X install. Thank you for your work and for the professional, well-communicated response.

Just want to say a personal thank you for your work on it and for the quick response. iterm2 is truly one of those apps I can't believe I get to use for free - thank you.

While you certainly may use it for free, you also have the option of donating! https://www.iterm2.com/donate.html

Thanks for your quick work on this. It's very much appreciated by security minded users of iTerm2. :)

Thank you, very much appreciate your response (and continuing excellent work on iterm).

Thank you for the quick fix, and many thanks for iTerm2, it is really a great piece of software!

Thank you gnachman! Thanks for making my favorite terminal as well.

This kind of response is amazing. Mistakes happen, it's the response and the resolution that matter. I was already a happy user. I am now even moreso. Well done.

Thank you, well done!

this is amazing. good for you!

Thank you.