[pietroglyph]

> impersonating Nat Friedman using a bug in GitHub's application.

This is not a bug, it's a part of how Git fundamentally works. If you want to mitigate it you have to sign your commits. GitHub could only attribute commits in the UI if they're signed, but I suspect that this is considered too much friction to enable.

[redrobein]

> how Git fundamentally works Honestly, given this, they should clearly label unsigned commits by default.

[jfrunyon]

They... do? Do you see the Verified note anywhere? It's not their fault if people don't understand how the tool they're using works at an extremely basic level...