An update/commentary on the Keystone incident. The absurd part is that the attacker managed to steal both customers' personal data AND the key used to authenticate Keystone devices. How on earth was such a critical key accessible through a compromise originating in a third-party tool used by their website? And as it turns out, their promised 180-day deletion of customer data had not been working reliably, leaving older customer records exposed. There is a more general takeaway, particularly for all those of you who are not tech savvy: once your data is out there, it can be extremely difficult to ever fully scrub it from the internet. Even if a company promises to do so. This can happen because of negligence, bad implementations, or deletion procedures that are not monitored as they should. There are many existing solutions to handle this, and you would imagine multimillion-dollar companies could find a reliable way to use that. But, alas, you would be surprised.

My intervention was among other things AGAINST the takeover of the dogecoin channels by Dogecoin Labs. They took control of community resources (the old dogecoin_devs X account that in the past was used by Dogecoin Core developers was renamed to DogecoinLabs) because the Dogecoin “Foundation” (a group with no mandate to represent the Dogecoin community and which pushed several disasters over the past years) gave them access to the channel. I am against all of this and disgusted by it. Do not try to frame my opinion in support of it.