iuri1

They will probably get a special treatment from Github and Github's code will get an unnecessary `if` clause for the special cases (right now probably only the epic one).

Did they sent the bonus certificate for participating in the biggest e-mail spam list as well?

You're probably still experiencing pull request #26 which was an actual trolling.

Well I used to have a gmail lab plugin which forced me into answering arithmetic questions when it was past 23 hours in my local time and I tried to send an e-mail

The only way to judge that is to look at the user's contributions. Which I wouldn't do because that could be the point afterall

This assumes the sole purpose of that team is to get spammed

Probably not everyone has disposable phone numbers or even know how to manage them, or even choose not to do it out of a personal decision

Either database dumps are in commit history (very common) or credentials like a password for a database is (even more common).

A third reason would be finding a security flaw in the source code and exploiting it.

Since the main leaked files are from github, I'm assuming they got it from one of the many reported github auth flaws which don't get fixed and allows access to private repositories. Or more unlikely, via someone getting sloppy with their laptop.

Now I wonder if the commit history has database dumps or sensitive information, which is a common practice, or if any twitch servers have been accessed through a breach or privileged information found in some of their source code.