<i>Since you&#x27;re a &quot;people here&quot;, your comments disprove themselves.</i><p>If I were going to respond to you the way I feel HN would generally respond to a CSRF hole in a major non-HN site&#x2F;service, I&#x27;d say something like &quot;Well, that line shows you&#x27;re as good at formal logic as you are at preventing&#x2F;patching CSRF holes&quot;.<p>You know the same as I do that HN&#x27;s getting light treatment from its users in this thread, compared to how security issues in other things typically get received. It&#x27;s OK to admit that.