Gina Häußge on Nostr: Oh, look, another fresh user account, another Claude session (admitted), another case ...

Oh, look, another fresh user account, another Claude session (admitted), another case of "no, I didn't read the Security Policy before spamming this Open Source Project with five security reports in 20min"

Once more scored with CVSS3.1 (we use CVSS4, clearly explained in the policy), once more with AV:N (we limit to AV:A, clearly explained in the policy), once more boiling down to "log in as an admin and then..." (not accepted, clearly explained in the policy).

I'm. So. Tired.