http://blog.ycombinator.com/new-hacker-news-guideline
and your comment would have been more concise and less gratuitously negative.
Same goes for the commenter bragging about how many bugs he's found and how "insecure" this app is. You could just tell him what the problems are.
It's a show and tell project, be nice.
As for the commenter saying he hacks my stuff, he has told me the problems and I appreciate it as I always do. He's always been a dick about it for some reason but that's his prerogative. I hope he keeps hacking what he thinks of as my projects (almost everything he's hacked before was something I was either re-coding or didn't code at all).
This is a choice, sure, but it's a choice to be lazy, at the expense of 10-20% (depending on your source) of users. It's probably higher still for a technical audience, which effectively removes IE and boosts Firefox through anti-google users.
Hence my suggestion, keep it short:
Example:
"There's a bug on the contact page."
Instead of
"There are so many bugs in this application, I can't believe anyone would put it on the open Internet. It is just asking to be exploited."
Each of us is an individual human being and none of us knows any better how to behave or live life than the stranger on the other end, especially after most of the details are stripped as we are communicating through a thin layer of text, much of reality is lost in translation here.
- Security is everyone's business. And people WILL criticize sloppy work in real life.
IMO, as a user and as a developer, both the examples you've written would be fine by me. In fact even the second one seems polite to me, when compared to the reviews I have seen for bad apps. :).
So the rules of the site don't apply to you? I get that you are frustrated, but your tone makes people not care about the content of your message.
Review the rules. I don't think my comment violated them and I think the response to my comment is an indicator that people have thinner skins every day.