Didn't mean to be vague, just didn't want to start anything.
He created an app (http://dscr.be/) that required you to log in via Twitter. After a bit, it tweeted a link to his site and followed him, without telling the user that would happen. (After I talked to him, he added the checkbox that is there now -- that wasn't there for a long time.)
He also follows massive amounts of people and then unfollows them. Every two weeks or so, I get an email saying he just started following me.
Neither of these are the end of the world, but I wouldn't run random JavaScript that he can change whenever he wants on my page.
EDIT: Sahil contacted me and said: "sorry, the massive following/unfollowing just isn't true. I normally just do it to you to remind you I exist. :)"
I don't really like responding to haters on Hacker News.
But, if anyone wants more information about the above comment (which is wrong multiple times), please email me and I'll respond there: sahil@slavingia.com. Thanks!
I'd like him to elaborate on this as well. That's a fairly damaging thing to say about someone who does these sorts of things (publishing products and services online). All I know him for is Gumroad.
Dare I ask for context?