@nullagent so just out of curiosity, what's the reasoning behind posting vulnerabilities like this publicly and not doing a responsible/coordinated vulnerability disclosure? After the blog post they made, it was clear you had their attention already.
Just seems a bit hostile towards the users to release such things publicly before allowing for a patch to be made available.
Appreciate your work otherwise. The Meshtastic community has been begging for more eyes on it from security researchers to help harden things up.