[the_mitsuhiko]

And to be clear, the disagreement appears to be that he did not want the CVE to be assigned.

[ArchOversight]

This has been an issue in the past, where NGINX disagreed with a CVE being assigned, but a CVE is the easiest way to get a vulnerability fixed across the ecosystem and in the distributions that distribute NGINX.

Each time something is silently fixed it takes much longer and is much harder to actually get the fix approved/backported/whatever is necessary to get it fixed.

[braiamp]

Except that no one is shipping with QUIC enabled. It's marked as experimental, so if you are deploying on prod you are asking for it.

[ArchOversight]

Asking for what?

[KomoD]

source?

[kayfox]

https://news.ycombinator.com/item?id=39374312

MegaZone is part of the F5 Security Incident Response Team.

[dsr_]

And just so that he doesn't have to explain it: yes, it's his legal name, and yes, it's a mononym.

Source: we were coworkers before F5.

[theogravity]

How does filling in the last name (or first) on forms work when mononyms are involved?

[MZMegaZone]

Short answer: Badly.

Long answer: Most DBs key on lastname, so MegaZone is my last name, officially, and I have no first name. Then I leave the first name blank if it'll let me, but more often I need to put something in there - so these days I use 'MZ' as that's what I have people call me. I used to use 'Mr', and I still need to use that on some government forms so everything will match up.

[theogravity]

On official gov documents like ID / Passport, does it read:

First Name: Mr Last Name: MegaZone

based on what you stated? I figure that gov forms would always require a first / last entry.

[darylteo]

If it's anything like how the Indonesians do it, <name> <name>

[KomoD]

Ah, thank you