Eduardo

Eduardo

@nsol.bsky.social

Infrastructure Engineer

17 followers16 following11 posts

Rather than reporting the specifics of the RCE directly to the project, Voisin chose to do what he calls a "carrot disclosure". He defined it as "dangling a metaphorical carrot in front of the vendor to incentivise change" [...] or to lose users who are unhappy about running vulnerable software.

Eduardo reposted

I don't care much about the whole Honey situation, but it's weird that it took people so long to figure how Honey made money, I installed the app years ago and removed it since it's been doing this from the start. This says a lot about how much research creators actually do before promoting stuff.

You are up to date.