He claimed he tried it, thinking it can't go through. And it seems plausible, since you he was researching similar attacks from the past. He had no reason to m

He claimed he tried it, thinking it can't go through. And it seems plausible, since you he was researching similar attacks from the past. He had no reason to make the github issue afterwards, if he was a blackhat who knew what he was doing. His entire presentation doesn't seem like that. (Or even like "someone who is trying for no real reason to try to look innocent". He didn't have to be public at all.)