honestly the real security fail in keybase seemed to be users flocking to add every single social media identity to their keybase account, allowing anyone using

honestly the real security fail in keybase seemed to be users flocking to add every single social media identity to their keybase account, allowing anyone using the public API to remove all doubt that greg1234 on twitter == karl5912 on reddit == john1005 on HN, etc. scrape all those social media posts, reddit subs, etc. and you've probably got a solid idea of who that user is. all under the guise of public FLOSS stuff.