rails/rails — comment on commit b83965785db1eec019edf1fc272b1aa393e6dc57
File:  line 0
By DouweM:

@Tie-fighter In my opinion it would have been a proof-of-concept had he done it with repos of his own and comments of his own. The moment he started affecting other people (the user that posted the comment he deleted, the user who he posted as (@dhh) and the admins and other users of the repo he hijacked) it became exploitation. The user, @dhh, the Rails core team and all the people who care about the rails/rails repository are innocent in GitHub's forgetting to protect its attributes.