[bpchaps]

If the information was noticed after being stapled to electrical poles, should Comed be given the credit? Hell no. Just because reddit is where the ack happened, that doesn't mean it was reddit who "did it". It just happened to be the place where it worked. It feels pretty unfair to give reddit the creddit here. It would have been significantly easier to either sell it or ignore it. Fuck both of those options.

FWIW, the disclosure sparked the discussion about a bug bounty program and a strong interest to reorganize their methods of raising security issues. I'm told both will go public, "soon". Whatever that means.