[yeshok]

It appears that he got the credentials from github, and this was critical for his exploit to work.

[Aeolun]

If he could find 30+ instances before he just gave up I’m not sure if we can count that as a significant barrier.

[jeswin]

And I hope he disclosed it responsibly.

[anthropodie]

I don't think he disclosed this. Theirs no mention of it in the post.

[ummonk]

The fact that he sat on it for months before going back and trying suggests that he didnt disclose the GitHub leaks to the government.