4 ms·
They signed an attestation, that is essentially using your authority to say something is yours. I would consider my ability to consent as something that belongs
by vageli 7y ago
They signed an attestation, that is essentially using your authority to say something is yours. I would consider my ability to consent as something that belongs to me. This change indeed allows people to access my data (in this case, saying I have something I don't, and using my authority without permission).
If they automatically joined my keybase user to my hackernews profile without my consent, it would be just as egregious.
- shawnz 7y agoYou actually do have the key in question though, so they did not claim that you have something you don't. Furthermore the change did not give them more access than they had previously like you are subtly implying here. The app could already make attestations on behalf of the user since that is what it's designed to do. > If they automatically joined my keybase user to my hackernews profile without my consent, it would be just as egregious. Egregious, maybe, but also not a backdoor.