even if they have 2-step auth setup, people choose "complete the email address" as a form of authentication which you can most likely get from their github profile.
the moral of the story here is - if you do not want someone to find it - do not publish it online
https://github.com/search?p=96&q=gmail+password&ref=searchre...
even if they have 2-step auth setup, people choose "complete the email address" as a form of authentication which you can most likely get from their github profile.
the moral of the story here is - if you do not want someone to find it - do not publish it online