vixentael

A valid point. But responsible disclosure in the world of un-patchable devices that actually move and can cause physical harm once pwned feels a little bit different. While we've done things to mitigate a blast radius, publicising guilty names would still lead to lots of damage because you know, these are toy cars.

I wonder how you calculate money loss, if your service is hacked.

would like to see some tutorial how to move parsedb&server to digitalocean or heroku

I agree that tls/ssl is really old complicated system with lots of cornercases in implementation. It's okay, but only if it's implemented in a proper way. I, as app developer, tend to skip to ‘what should I do’ section, and it’s good this time!