chenmike

I’m pretty sure GP is saying if you already had an account and you delete it, it’s trivially easy for someone to register with your old handle and impersonate you

Of course people can always impersonate you but the goal here is to prevent them from impersonating you with a social handle people knew you had.

I’ve never heard anyone brag about giving working PIPs. PIPs are pretty demoralizing even if they “work”.

Maybe you should consider giving people feedback in non-PIP form!

How are you allowed to tell me if that's an honest question or not? Do I have some hidden WP Engine shill comments in my history or something? Can you read my mind?

I don't have a strong opinion on WP Engine's behavior, because I'm not convinced by Matt's arguments. I do have an opinion on Matt's behavior though. I think it's unhinged.

Feel free to respond but I'm done with this conversation, given how unpleasant I feel it's going to be given the incredibly uncharitable tone in your response. I recommend taking a walk or something.

Honest question: what am I supposed to be demanding from WPEngine? They’re not the ones out there posting unhinged rants.

There’s no reason you can’t do both, and indeed some a11y linters recommend doing that

I'm in the same boat as GP. Was invited early, loved the Arc UX far more than any other browser. I've recommended it to many people.

As many other comments have pointed out, this vulnerability is such a rookie mistake that I don't think I can trust them again after this without understanding what factors in their security/engineering culture led to it. Patching this one issue isn't enough.

Also it requires both hands