I've no leg in this I'm just here for the popcorn.
But as a rule of thumb: when someone as ancient as ocminer pats you on the shoulder and tells you something: you sit down and listen.
Sunerok clearly needs lessons in humbleness.
Couldn't agree more. I've been following this thread all day for the back and forth entertainment.
If I was part of the Verge team I'd have worked together with ocminer and even paid him for help if I couldn't handle it myself. I've been mining on his pools for years now. Always does an excellent job supporting his own infrastructure and is known as a stand up member in the crypto community. More pool operators should follow oc's lead.
As for the vulnerability being disclosed privately vs. publicly it really doesn't matter in this instance.
1) ocminer was not the attacker
2) the attack was already taking place without significant public contact/updates by the Verge team as to what was happening
3) ocminer did not disclose technical details to the public in any form where someone could take the information and replicate the attack themselves
I don't feel it's necessary to add my personal opinions on the Verge blockchain however it's very clear that if the developers need help, ASK FOR IT. There is no shame in seeking help when you're overwhelmed. Remember that blockchains are supposed to be decentralized, open source, and contributed to by anyone with the means to do so, not a self contained dictatorship.