The thing itself seems somewhat newsworthy but personally, I'd rather hear the CF people defend the TLS-MITM-as-service idea itself and get yelled at for that. The fact they're being weaselly and insufficiently contrite seems secondary.
With regards to the fact that it's part of another thread, I don't think that matters too much. If it were an update present as a separate document it would pass muster. There've been several open letters, and responses to such, and further responses again, etc that have been posted to HN. Furthermore there's no guarantee that someone reading the original thread will see this exchange; I read the thread after the exchange happened and missed it.
This is significant enough to be posted as its own item, that it's part of another, ongoing thread shouldn't take precedence over this significance.
23. Announcing the first SHA-1 collision (googleblog.com)
2882 points by pfg 1 day ago | flag | hide | 488 comments
second page: 37. Cloudflare Reverse Proxies Are Dumping Uninitialized Memory (chromium.org)
3168 points by tptacek 1 day ago | flag | hide | 979 comments
It says "1 day ago" for both now, but the second story came later. So how come it ranks so much lower, having even more votes? Is that HN penalizing comment count, or users flagging it? If it got flagged, would anyone have a problem with removing those flags and removing flagging privileges from said users?