Post #2207329

Someone apparently found some security issues in Forgejo but isn't willing to follow the security procedure of the project. What is troubling me is that their posts calling out of the potential vulnerabilities are getting removed on Mastodon, first on infosec[.]exchange then on mastodon[.]social. What is the limit on rules against harassment when it targets an entity (the Forgejo/Codeberg project) and not individuals? Is it okay to downplay or hide the potential security issues in this story? I'm happy to host my own instance with my own rules. https://dustri.org/b/carrot-disclosure-forgejo.html EDIT: The post in question was restored on infosec[.]exchange.