On Wed, Sep 22, 2010 at 18:58:25 +0200,
drago01 <drago01(a)gmail.com> wrote:
In case of a security issue a random note somewhere "don't do that" is
not acceptable ... that's all I am saying here.
You are leaving users at risk by assuming that they will read that
notice (note: most wont).
I disagree. There are lots of degrees to security bugs. How they are handled
depends on the cost of fixing the issue and the impact of the bug. These
tradeoffs are made all of the time.