Ridiculous vulnerability disclosure process with CrowdStrike Falcon [2022]

The punchline says it all: “Many bug bounty reports never assign CVE-IDs, leading to a false perception of security and software quality.”

162 comments from 2 years back: https://news.ycombinator.com/item?id=32548671