lol yeah, i knew that the owner of the key was exploited the minute he made that account.
i still knew his tactic and only select few noticed it.
he was obviously trying to get past lugnut, so he disabled all the logging stuff to trick lugnut and convince everybody.
No, I was aware of this too. That's why I bolded "on the server I tested" in my expose.
On the other hand, Gweedo is pretty loving dumb. PRetty much any idiot could've removed logging from a script, but the script didn't have it originally, and he definitely doesn't know how packages work.