Hacker News Reader

Xray-core's pinnedPeerCertSha256 treated an inserted leaf as the pinned cert, and the fix commit never called it a vulnerability.

Your LLM left out the clear hypocrisy and the part where the fixed version still had a vulnerability

His comment actually added value, but yours doesn't seem to have the same value.

Mine specifies the value that I thought was missing, though?