[development] Irresponsible security researcher

[Daniel F. Kudwien]

> He is just one more who does not believe in the practices of 
> the community.

You, he, me, and everyone else is free to believe whatever one wants to
believe.

As long as this belief does not result in actions that harm someone else.


Justin Klein Keane's publications harm the Drupal community and Drupal site
owners at glance.  We, the Drupal community, set up and agreed on the
security review and announcement process the way it works today.  His posts
are hi-jacking this process; and that's why he is absolutely irresponsible -
no matter whether his findings are valid or not.

The result of Justin Klein Keane's actions is that people may think that
Drupal is insecure - not providing fixes for potential security
vulnerabilities that may exist.  Contrary to what Justin Klein Keane thinks;
he does not help anyone.  Justin's assumpations only make things worse.


True is that we cannot prevent him from doing so.

True is also that he is not respecting the Drupal community and Security
Team by doing so.

But true is also that we do not have to respect him for his actions if he
even continues to harm everyone after trying to get him on board.


sun