[carefree-bob]

From the title, I thought this was going to be another one of those speculative execution information leakage bugs that are basically impossible to fix, but something this simple and easily fixable -- it's discouraging. Hopefully this decision is reversed. Also "Thank you for hacking our product" seems a bit unprofessional for someone engaging in responsible disclosure for a major security issue with your product.

[tgsovlerkhgsel]

"Thank you for hacking our product" sounds perfectly appropriate to me; it clearly uses "hacking" in the positive sense.

[Delk]

It actually says "hacking on one of our programs", which makes it even more obvious that it's using the word closer to the positive traditional hacker culture sense.

I'm sure that still looks unprofessional to some people, just like any jargon that isn't corporatese does.

[carefree-bob]

I could have been giving this an uncharitable reading.