They did that in this case, because it apparently wasn't clear enough. Their real response was to create this: http://help.github.com/responsible-disclosure/ ht

They did that in this case, because it apparently wasn't clear enough. Their real response was to create this: http://help.github.com/responsible-disclosure/ http://help.github.com/responsible-disclosure/ Which more explicitly forbids this.