Hacker News Reader

Response time is useless if it still takes 7 days to deploy a patch for a simple XSS issue.

Totally agree with that. The important time is the one between the disclosure and the fix, not the one between the disclosure and the first response. It could be a bot :)

Trust me, Nenad is not a bot :)

We work hard on becoming better and faster at tackling these and other issues. We try to learn from incidents and mistakes in order to be faster next time.

Thanks for the feedback.

Reply on news.ycombinator.com