upvote
why not? If you don't like it don't click it. Is not that the main purpose of the web that everybody can publish a web site?
reply
Blame heartbleed for the practice, which long predates ChatGPT and vibecoding. Human psychology is to blame. Only nerds are going to find CVE-2014-0160 triggering, but if I say heartbleed everyone who was there remembers.
reply
> Only nerds are going to find CVE-2014-0160 triggering, but if I say heartbleed everyone who was there remembers.

That has more to do with the severity of heartbleed than the fact that it had a name and a logo. I've since seen a lot of vulnerabilities try to market themselves with websites, cute names, and stupid logos but I still don't remember them because they still just weren't big enough to actually be memorable.

reply
I think it's a good idea when there is no CVE and a don't fix status.

Before this practice in general you simply released the exploit and see if enough chaos triggers a fix.

reply
If people can't be responsible, let's just create a mailing list, call it "full-disclosure" and post everything there.
reply
Not if it helps raise awareness and gets companies to notice. Is peanutbutterjelly.co.uk more worthy of a domain ?
reply
Why? I like the presentation.
reply
agreed, we should all use gopher and block all web traffic, go back to text based systems, use single threaded operating systems and use token ring NIC's
reply
I'll be honest, I have no idea what gopher or ring NIC is, lol.
reply