Tinker ☀️Soooooo I found a massive vulnerability today, the day before Thanksgiving.
Buuuuuuut it's looks like its existed for a couple of years.
So, should I report it RIGHT NOW!!!! The day before thanksgiving? Or wait until next week.
On one hand, they'll have to react to it as its huge. And it could interrupt their time with family and a major holiday.
On the other hand, it's been around for so long, what's another couple of days going to change anything?
On the third hand, if this gets exploited over the holiday weekend, it's on me and could affect even more people.
Hmmmmmmm.... choices choices.
All GNU social JP content and data are available under the