[masklinn]

> Apparently he had contacted Github before exploiting but they didn't show any interest in fixing the issue.

If this is true... sounds like business as usual at github. I don't get it, it's not the first time they refused to do jack shit and proactively fix reported security issues before they were used in a high-profile demo exploit.

Then again, it doesn't impact their bottom line since nobody switches or cares when that happens aside from a few days of noise, so why would they?