1. Title‑naming conventions& HN’s title‑consistency rule
- “Would it be possible to stop using aXXb nomenclature within the titles? Some of us aren’t hip enough to know what all of them mean.” – bearsyankees
- “The guidelines require using the same title on HN as is on the original post.” – tomhow
- “a16z = ‘Andreessen Horowitz’, for those not in the know.” – rectang
2. Vulnerability disclosure, researcher compensation & corporate ethics - “I wish there was legislation that allowed the government to fine vendors for security vulnerabilities … and could function like other whistleblower systems where a researcher … can collect 50%.” – mtlynch
- “I would love to hear what the vulnerability is, but I assume you want to get paid for it. Is that the play?” – bryancoxwell
- “Isn’t it also illegal to withhold knowledge of a vulnerability for payment? It sounds like it should fall under some variety of blackmail.” – tardedmeme
3. Startup security culture – lack of expertise & speed‑over‑security bias
- “More often than not security‑minded people are encouraged to focus on things that get the product to market faster instead.” – c2h5oh
- “The number of FISMA‑HIGH, ATO’d/RMF’d, security‑audited government systems I’ve seen with equivalent security issues is… substantially nonzero.” – zbentley
- “You could even say they’re paid even more to ‘move fast and break things’.” – cyanydeez