"This is not a security issue" and "we can improve things here" are entirely compatible.
Also doesn't seem like a Google project?
Also doesn't seem like a Google project?
Also, bringing up Project Zero’s 30-day disclosure policy while complaining about someone sharing what they thought was a vulnerability report for visibility feels off. If it’s not a security issue, then there’s no reason it needs to be kept quiet. Grow up.
Let’s not turn harmless fixes into drama.
The project seems to be sponsored by Let's Encrypt, fwiw.
Deleted comment
You lied to whip up outrage so you can piss an open source maintainer in the face, seemingly just to get revenge? Well done. Good job. 10/10 contributing.
It's about corruption and bit rot, not about seed length. This is a project of a ex-google employee, used in chromium, that google publicly endorses; that's definitely akin to a "google project".
LOL, ok.