[glag0lit]

tl;dr

a friendly guy reported to tarsnap that you could sign up without needing the emailed confirmation link by creating that same confirmation link yourself with the cookie/token being hidden, but present in the HTML code.

also, there is no bug bounties for the tarsnap website, only for tarsnap code.

[cperciva]

a friendly guy reported to tarsnap that you could sign up without needing the emailed confirmation link by creating that same confirmation link yourself with the cookie/token being hidden, but present in the HTML code.

That's a decent summary, but I didn't think I was all that long-winded...

[djm_]

Quite the opposite, it's nice to see someone put some effort into their write-ups. It's so much more readable as a story.

[glag0lit]

Oh it really is just a summary, and no commentary as to whether TFA was long-winded or not. That's left to decide for each individually.

[w8rbt]

When you write tl;dr followed by a very short summary, doesn't that itself imply that the article was long?

[slight]

tl;dr has also become a general shorthand for a summary.

[simcop2387]

It's almost an abbreviation for summary!

[tome]

The summary was certainly shorter than the article!

[ninguem2]

Maybe the guy who found the bug won't get $1000, according to your rules, but he definitely deserves a cookie.

[monochromatic]

Please don't turn this place into a pun-fest.

[cperciva]

I did pay out a bounty of $200 for this.