There are some remaining non-security bugs with this that I'll follow up on in T13682. I believe the security side of this is now resolved.

The details of this attack will be disclosed at a later date, once installs have had some sort of plausible chance to upgrade.

See also T13588.

Purely venting, but the advanced version of "click here to schedule a mysterious meeting" is to outright lie -- pretending that you deeply respect the recipient's achievements -- before asking them to schedule a mysterious meeting.

I think lint could reasonably emit two warnings about this:

Please use Discourse to discuss Phabricator.

This task references more details on "Excuses" and "Prompts", but there isn't any. Is there any way to provide context around lint issues?