[coal320]

Responsible disclosure was given. Developer doesn't seem keen on changing things.

[MrGilbert]

Might be worth adding that piece of information to the original article, maybe including a timeline of events.

[thih9]

The original article has now been updated:

> The developer has been given responsible disclosure and I have been informed that steps are being taken to address the security concerns.

There is still no timeline or other information about the events, which is unfortunate; I'd expect the author to document and report this in such a situation.

[handfuloflight]

Valid security issues buried under unnecessary smugness and basic 'techniques' like demonstrating the unzip command. The condescending tone undermines what could have been constructive disclosure. This reads like a high schooler dunking on a first grader, I'm just glad we all learned from the technical prowess of extracting an archive. The underlying problems with exposed API keys and unrestricted database access are serious, but your arrogant presentation does a disservice to responsible disclosure.

[rockemsockem]

I read it as an incredulous and increasingly pissed off person absolutely dunking on a smug person's attitude and success who has done so in a fashion they find completely unacceptable.

[ycombinatrix]

this app leaks the private data of hundreds of children, but GP's "smugness" is the problem? give me a break.

are you Christian Monfiston? that would explain a lot.