Sure, that was my knee jerk reaction too. Of course they should suspend the account! But I think that was the wrong choice. Shutting down the one account wil

Sure, that was my knee jerk reaction too. Of course they should suspend the account! But I think that was the wrong choice. Shutting down the one account will do nothing. He can create a second account in a matter of seconds. They fixed the code that permitted the exploit, right? So the fix alone should be plenty to prevent any more malicious attacks. And now, because of the suspension, they have a wave of bad PR (justified or not). This guy is clearly infatuated with Github. He got a tattoo of the Octocat for crying out loud. Why would you punish this guy for loving your service and caring enough about it to warn you of a security vulnerability? Seems like there are only minuses to suspending the account, not a lot of pluses.