RichiH

8 ms·

1. 1.▲
   by RichiH 4y ago

   For anyone reading this, there's a reply and relevant context at https://news.ycombinator.com/item?id=32837295
2. 2.▲
   by RichiH 4y ago

   NB: I work for Grafana Labs as Directory of Community. As this is not how we (try to) operate, I also had a look. From what I could find, it seems the account you are referring to is a very early Cloud account. For reasons I don't know
3. 3.▲
   by RichiH 5y ago

   Agreed. We will certainly improve processes on our end as a direct result of this, as well.
4. 4.▲
   by RichiH 5y ago

   I talked to Jordy about it. It was his first CVSS HIGH vulnerability and he was super happy & excited about it. While we would have preferred if things went differently, it was an honest mistake. On balance, I still prefer if someone ap
5. 5.▲
   by RichiH 5y ago

   Important note: I mixed up CVE-2021-41090 and CVE-2021-43798 in the initial version of the blog post. While that has been corrected and a note added to the blog post, it still lead to some confusion. The 0day is only for Grafana-the-softwar
6. 6.▲
   by RichiH 6y ago

   And I have Prometheus data from 2015, so I would argue that's long-term.
7. 7.▲
   by RichiH 6y ago

   This will also depend on SIG o11y, the creation of which is currently being voted on by CNCF TOC. TOC vote is looking good and projects which have been in sandbox for some time are obvious candidates for early review.
8. 8.▲
   by RichiH 6y ago

   The savegame support of ZSNES and the easy way to hex edit memory are still fond memories of mine.