On IRC, we generally knew who did or did not have vulns and trusted not to BS. That implicit trust did make things difficult.