Being a public university, I hope at some point they address this publicly as well as list the steps they are (hopefully) taking to ensure something like this doesn't happen again. I'm also not sure how they can continue to employ the prof in question and expect the open source community to ever trust them to act in good faith going forward.
Source:
https://scholar.google.com/scholar?hl=en&as_sdt=0%2C22&q=Lor...
This is quite literally the first point of the Nuremberg code research ethics are based on:
https://en.wikipedia.org/wiki/Nuremberg_Code#The_ten_points_...
This isn't an individual failing. This is an institutional failing. This is the sort of thing which someone ought to raise with OMB.
He literally points to how Wikipedia needed to respond when he broke the rules:
https://en.wikipedia.org/wiki/Wikipedia:What_Wikipedia_is_no...
What did you see that offended you?
Doesn't mean there aren't ethical issues related to editors being human subjects, but you may want to be more specific.
The way I've seen Harvard, Stanford, and a few other university researchers dodge IRB review is by doing research in "private" time in collaboration with a private entity.
There is no effective oversight over IRBs, so they really range quite a bit. Some are really stringent and some allow anything.
https://www.startribune.com/markingson-case-university-of-mi...