In reply to Chris Christoff (chriscct7).

Hi Chris, I'm confused by your comment. Who are you replying to? Your comment was a direct reply to mine (indicated by the indentation), but the points that you copy/pasted from Nacin don't seem to be referring to my comments at all.

Trac says that #20276 was opened on 3/21/2012, which is what I was basing the 2 years remark on, but I'm happy to defer to Nacin if he says that that's wrong.

I never claimed Yan was acting on behalf of the EFF when she disclosed the vulnerability, or that it was a Core vulnerability rather than a WordPress.com one. In fact, I said the opposite in the very comment that you replied to.

What is the URL for Nacin's original comment? Having that context would probably clear up the confusion.