Amiga clarifies Commodore rights and friends compromised in Passwordless Authentication

Where is the fbi in this? Why has no one been arrested? This is a a welcome change. Couldn't GitHub detect a Shai-Hulud exfil repo being created and just... block it? Given that it's a worm, the attacker wouldn't be able to play couch co-op.