Hector Martin

Maybe he had some other shit to do. We have lives too you know. Right now I'm "sitting on" a vulnerability because I'm on vacation!

Maybe that time was spent on another vuln. Or shit that needed doing. Or taking a break because people like you make this stressful & tiring

If you're really that busy, hand it off to someone trustworthy to do it. Lots of willing people.

And now we're back to demanding free labour. Do the work, don't get the credit. No thanks!

Who says you don't get the credit? Coordinating disclosure doesn't mean it's your bug.

It would be diluted. And if not so what... You aren't his boss. He owes you *nothing*.

And now we're back to him being perfectly entitled to do what he wants and me being perfectly entitled to think his choice is wrong :-)

That is true :) but I think commentary on disclosure like yours does harm to global security, more harm than his two month delay