Would be nice if the timeline matched up with the text of the blog post (missing "HackerOne provides disclosure guidance").