The negative response tends to be against the super low impact ones, such as this.<p>I have to agree with the GP, blogging about an issue like this just seems tacky.<p>The reactions would undoubtedly be different if it was a practically exploitable CSRF, like something that allows you to change users email addresses.