nostr:npub1hqzuy2jmgft6f4emjv64ma5w4kz749p2zmkpl75pdj7s5swj8maq0xyaga

> are we just thinking they're not even doing anything at all during the time it takes to fix the problem?

Yes. Relying on security by obscurity is baked into BorgSoft's DNA. Which is why they still won't publish Windows source code under Free Code licenses. Even the ancient, unsupported versions.

This applies to reputation security too. They think that being opaque about their vulnerabilities makes them seem more trustworthy. It doesn't.

nostr:npub1wf44gvmu4g6x0gwwjgrnlw0f8dxmvx7h929k057wwv8hwa8clq6snr94wn