Ask HN: How to communicate security issues to the community of software project
Some project recently had an issue that let remote, unauthenticated users read any file from the server it ran on as long as user permissions did not interfere.The fix to that issue was implemented in a reasonable time frame but the release was not specially advertised. Instead the mention was inside the body of a generic "softwareproject Version 1.2.3 released" post.When I posted some pretty...