Agreed. The author will most likely argue they "released it so uber would fix it". That could have easily been done anonymously then released once the exploit was stopped.

They wouldn't get all the attention and shares if they did it that way around, though.

Post reply on HN