> - Is GitHub confident that they identified all leaked user sessions? Given that they revoked all current logins, rather than just the affected ones, I assume

> - Is GitHub confident that they identified all leaked user sessions? Given that they revoked all current logins, rather than just the affected ones, I assume that they have no way to tell which sessions were affected.