> Apparently he had contacted Github before exploiting

Apparently not:

"I shouldn’t have exploited it before reporting, so apologies if I have offended anyone."

http://vikraman.org/posts/2013/12/1/linux-ng.html