bcrypt@infosec.exchange ("yan") wrote:
pop quiz! which github account authored this commit?
---
answer: me (diracdeltas). bsclifton had nothing to do with this commit. i entered his email using the --author git flag and github automatically linked it to his account. the "verified" label (which at a glance makes it look like the entire commit is verified) only verifies my account.
reminder that unless someone is signing git commits, there's no real guarantee that they actually authored a commit!