This is CWE-204, there are loads of big companies that don’t care about this. Netflix is one of them where you can enumerate registered users email addresses from the login screen.

If you want to report this to them you can check if they have a security.txt file at https://domainhere/.well-known/security.txt where they should list the contacts to their security team.

You forgot the picture of Daniel Stenberg propping up the ants.

So, all roads lead to Arch is what you are saying?

For now…

It really doesn’t seem feasible, I mean how are they going to get the third world children there to mine it?