It's this easy to spoof commits on GitHub | Hacker News Reader