RE: https://mastodon.social/@danigm/117594636540457349
it's so cunning. "helping out" by making public a "security issue" (coin toss if it's valid, you figure it out lulz) and blackmailing you into free labour+advertising for them.
@lrhodes it's the argument that some people are using to try to force to allow LLM reports in projects with a strict no-ai policy. Some people were telling me yesterday that I'm basically killing people for ignoring LLM security reports in libxml2
@hbons security policy: poc + fix or gtfo