It's not stupidity. It's statistics. There' s 1 million plus in projects, 2 million plus in repositories, and 1 million plus in users using the product over a s

It's not stupidity. It's statistics. There' s 1 million plus in projects, 2 million plus in repositories, and 1 million plus in users using the product over a stretch of nearly 5 years. If those searches had uncovered no passwords whatsoever - now that would be surprising. This is just what would be expected - just by sheer chance. And yes - it is Github's responsibility to protect its users from their own stupidity. Github's sole value is in its community - any of the technical issues that they have to deal with are commodity and have already been dealt with before else where. Github's net worth is in its community good will and path dependence. Killing search for now is the right decision to keep the gravy train running.