I think the private bug reports category should be removed, and there should be something in bug reports telling you to message a staff member if it’s an exploitable bug. As the Devforum expands, we will unfortunately be much more likely to see leakers and other untrustworthy members as we have received recently. It could be dangerous if a post in this category got in the wrong hands, as it isn’t impossible to do so.
Well… I don’t think is a good idea…
Directly messaging staff is just as effective as posting it in the forum
Well, we used to have tags we could surround certain text so that only mods could see it. If we still have those then we can just make posts to inform people of bugs, but only make the repro steps shown to admins.
Hmm, if those are still a thing then I think they should be put in a pin or something
The title may be a bit misleading since it’s indeed not private, but it’s still better than posting it in the main bug report category, since there’s an extra layer of obscurity.
Directly messaging staff has other deficits, namely that people may send the same thing multiple times or that the message is not available for the staff member that has to deal with the issue.
I think that category should definitely stick around. It’s not necessarily super secure, but it still allows developers to have a somewhat private discussion of an issue.
Although I’m not even allowed in that forum, I disagree it should be removed. The cons of malicious people finding the exploits is outweighed by the pros of letting developers know about these exploits and perhaps patch them in their games.