johnyma22

Security related issues should go through responsible disclosure and it's up to the maintainer to provide such a process or the recently flurry of "opportunistic whitehats" will continue to spam your issues and require triaging..

Github provides a process for this under the "Security" tab: https://github.com/ether/etherpad-lite/security as an example..

I find that by having a documented process it filters out a decent amount of time wasters.

Best part of Gondwana

I guess you gotta celebrate the wins when you can no matter how messed up the situation is! :)

I know this isn't the core of the story but I'm kinda proud of my country (The UK) for not fucking this up.

I think the UK Justice system did it's job here, albeit keeping him detained for a lengthy duration to do it.