Ah, I misread that -- I thought it was if you had contributed to their repo, not simply starred it. I had left it out of the calculation for simplicity's sake as I figured most people would not have done that.

Where did you get the 1,698 figure -- was that the number of accounts compromised?

It's not mentioned in the body copy, but if you look at the URL slug it's there:

https://github.com/blog/1698-weak-passwords-brute-forced

That's not correct - I surmise that's the ID of the post in the DB. For example: https://github.com/blog/1681-subscribe-to-github-s-explore-e...