Ridiculous vulnerability disclosure process with CrowdStrike Falcon [2022] (modzero.com)

The punchline says it all: “Many bug bounty reports never assign CVE-IDs, leading to a false perception of security and software quality.”

162 comments from 2 years back: https://news.ycombinator.com/item?id=32548671