I already explained my perspective on this here:<p><a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11696750" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11696750</a><p>Suffice to say, the real point is whether people can compromise his apps with something that would harm their computer. So, let&#x27;s rephrase your question, &quot;What&#x27;s the difference between convincing him to post a challenge string on his website and convincing him to arbitrarily modify code of apps he distributes to users?&quot; Obviously, a huge difference unless he&#x27;s a complete idiot.