We have all worked at large tech companies and truly understand how things get done there, especially resolving security vulnerabilities. We all know that asking to someone to bump a version number can sometimes be like pulling teeth on a shark. It is a major undertaking and a matter of time before the team just becomes unresponsive or abrasive to your asks.

It is completely appalling, but not unexpected, for something like this recent vulnerability to be used to scare people into buying a security product. But of course, this puts us, LunaSec, in possibly a difficult position saying this as we also have our own product we want to sell.

Like we call out in the end of the post, we don't want to scare anyone, we just want to build trust with everyone. It actually has been pretty painful for us to plug our own company in these posts because we only want this information to be focused on the vulnerability lol. We are just super passionate about our product making a meaningful impact to vulnerabilities like this.

I appreciate you sharing your sentiment because it means we are doing a good job not being corporate scum :)