This site has had a void of actual discussion for a while. You can't disagree too hard.

I'll wait.

Gee, fucking wow, it's almost as if it's plain a day why they've sucked as a corp, non profit, and culturally for a decade at this point.

What makes you feel entitled to the content of the publisher before the copyright expires? Do you feel that you deserve access to everything because you've deemed the concept of ownership around book publishing immoral?

You can't just take a digital copy of a physical book and give it to everyone worldwide. That isn't your choice or decision to make nor is it ethical to ascribe malice to simply retaining distribution rights to content they own.

"Make publishers richer", it's actually just honoring the concept of ownership...

If you have an issue with bots on your platform you're going to always have bot problems. It's trivial to abuse your auth to derank your standing too. I can force your app to send out bounced emails to hundreds and thousands of bad emails. Costing you $$ or rep in the email exchange. The second affects your ability to authenticate legitimate users too.

Wish magic links would just go away and be acknowledged as an anti-pattern.

Congrats you're back to square 1!

I believe transparency is necessary, but also have been in the situation where the alarms are going off and you slip on making sure disclosures are optimally distributed. Generally I'm just concerned that it's documented at all.

Now if they maintained not revealing the security issue over the following week I'd agree.

Should they have had a bulletin stating when it occurred in August? Absolutely. I'm not disagreeing, and the distance from that event I would agree with you. However, considering just how fundamental the security vulnerability was there isn't exactly an immediate benefit to blast that to the world. It opens up the spotlight for more advanced attacks to take advantage of other unpatched holes.

Taking the time to go through and _really_ make sure it's patched (as well as a general check around the codebase for other EZ vulns) is, in my opinion, the better option.

Now if this had been a larger timeframe and repeated offense I'd agree the security hygiene for Arc should be bumped up in priority ASAP and until that probably happens Arc as a platform could not be trusted.

Instead of building more efficient small cars it becomes impossible to make them meet the efficiency requirements without making the car cost so much extra through fines. So instead you just get more "trucks" and SUVs. No more sedans! Those are the vehicles killing the planet!

If we are to assume black and women workers have historically been missing entirely from tech then the efforts of recent initiatives would bring fresh people in? Those newer people wouldn't have the same length of professional experience but the expectation is to be paid equal?

Put another way if the CEO is white and they make 50m and you have two employees, one black and one white who each make 50k, the average for white workers would be skewed higher? Before anyone replies "um actually, it's only workers within the guild, the CEO isn't included", okay, but does everyone in the guild have the same job title, experience, and responsibilities?

As an aside, they've structured that website like trash. Yes, I'd love to click a link to see the pay study which is just duplicated below the link without any additional information. It's like they purposely are trying to say nothing but be loud.