Hacker News Reader

The world would be a little better if every software company could inform its users of security vulnerabilities and bugs as these guys did.

They can, and many do or have done so in the past.

Let's not pretend that security incident post-mortems are anything new; they aren't. There's not really even anything special about this one.

I don't really see much point in applauding these guys for doing what's perhaps the minimum we should expect from them in this situation.

Most do. Only in the extremely bleeding edge world of boutique tech frameworks and tools does it seem out of the ordinary.