DoorDash email spoofing vulnerability sparks messy disclosure dispute | Hacker News Reader