It doesn't hurt that the vulnerability was already discussed in a bug report by the 'attacker.' I'd imagine it would have taken a longer time had they needed to track down how exactly this happened, though I guess I'm making an assumption on what their logging/auditing/reporting is like.
Re:Hacked: commit to rails master on GitHub
by jberryman on Sunday March 04, 2012 @01:56PM
(#3663527)
Right, I'm kind of baffled by the posters on the bug report calling this a "0-day" exploit.
Re:Hacked: commit to rails master on GitHub
by sausagefeet on Sunday March 04, 2012 @02:54PM
(#3663730)
At the very least you'd probably be getting it on the cheap at that point.
I'd buy Github stock if I could.