There was a leak a few days ago suggesting July 31, which has since been retracted by the source (SkyShowtime in Europe).

@thisismissem@hachyderm.io ah understood. I didn't quite get how the fund worked, but it makes more sense now (and is much simpler—organizationally—for Nivenly!) I don't think we'll add exclusions for security fund recipients I would say, though, that one of the requirements has to be that the affected software accepts the vulnerability. Plenty of self-proclaimed "security researchers" have filed reports, and some go as far as to publish CVEs (against our own software!) without our permission. Quite the opposite of responsible disclosure.

@Sunil-Kolluru nodebb-plugin-sso-oauth2-multiple

@obenland@mastodon.social wonderful, good work!

Thank you @deadsuperhero@social.wedistribute.org and @jenniferplusplus@hachyderm.io, I was a little caught off guard by the whole thing. Happened so fast, and now FediForum is cancelled. Hmm.

@trwnh@mastodon.social sure, makes sense. That to/cc already exist in the wild as arrays means one less thing to worry about with multiple cross posts.

@mario@hub.somaton.com that's wonderful to hear! Thank you so much.