It sounds like Mrs. Preston-Werner was a regular presence at the GitHub office and, according to Horvath, had extensive access to private information throughout GitHub's systems despite the fact that she wasn't an employee. If true, that should certainly be a privacy and security concern to any GitHub customer or user.
> If true, that should certainly be a privacy and security concern to any GitHub customer or user. We left github private repo hosting when they got VC funding. Because of such a scenario where we could be competing with a company that was funded by the same VC that gave GH money. Now in a perfect world that shouldn't be a problem because the VC should never access private user data. But well ... as you see it's not…
Though I agree it presents a bad image of GitHub's access control in general.