[smith7018]

A freshly-imaged machine on public wifi should be more than enough to hide their identity. No reason they have to use Tor.

[diebeforei485]

DMCA claims can go up the chain. For example, they could get the email address from GitHub, then subpoena the email provider for info to unmask the person (for example, any phone number used when signing up or logging in to the email account). Then, they could subpoena the phone company to identify the perpetrator.

[chatmasta]

Next we'll hear about Musk buying a coffeeshop in downtown SF to get access to their security cameras