2 ms·

> The Xe link you cited doesn't speculate about credit card details being hacked at all. In fact, the entire gist of the blog is that we shouldn't be speculatin

by bArray 4y ago

> The Xe link you cited doesn't speculate about credit card details being hacked at all. In fact, the entire gist of the blog is that we shouldn't be speculating about hacks or other theories. True, I accidentally bridged that gap when reading it. I have updated my comment to reflect security more generally. > The 2FA recommendation isn't a response to a potential hack, it was just general good security advice. Given the context in which the article is written (the security team being expelled), this is the way I have interpreted it. It's not a standalone PSA on best security practices. It's written as if enabling 2FA is an alternative to homeless creators.

xena 4y ago
Hi, Xe here. The message under `UPDATE(M09 08 2022 20:40)` is intended to be spread to and understood by less technically apt people. I have intentionally focused it on harm reduction, lessening fearmongering and overall calming down the situation so that we can wait for the truth to be revealed. As I mentioned earlier, suggesting people use 2FA is something concrete people can do right now to help secure access to sensitive accounts. I'm worried about the kind of situation that would cause this to happen, but I don't know what is going on so I have to assume that there is active disinformation and interpret things in the best possible faith. The last thing I want to do as a technical communicator is lie to people.
- bArray 4y ago
  Thanks for explaining. It's a difficult one if your supporters are not tech savvy. At the very least I would suggest they keep a close eye on their transactions and be prepared to take action (which is also good bank security practice). I agree there will be misinformation in this scenario, but the facts we do have do not bode well. As far as I know, it is not a good sign to fire your entire security team. There isn't a circumstance I can imagine where this reflects well on Patreon internally.

by bArray 4y ago

xena 4y ago

Hi, Xe here. The message under `UPDATE(M09 08 2022 20:40)` is intended to be spread to and understood by less technically apt people. I have intentionally focused it on harm reduction, lessening fearmongering and overall calming down the situation so that we can wait for the truth to be revealed. As I mentioned earlier, suggesting people use 2FA is something concrete people can do right now to help secure access to sensitive accounts. I'm worried about the kind of situation that would cause this to happen, but I don't know what is going on so I have to assume that there is active disinformation and interpret things in the best possible faith. The last thing I want to do as a technical communicator is lie to people.

bArray 4y ago
Thanks for explaining. It's a difficult one if your supporters are not tech savvy. At the very least I would suggest they keep a close eye on their transactions and be prepared to take action (which is also good bank security practice). I agree there will be misinformation in this scenario, but the facts we do have do not bode well. As far as I know, it is not a good sign to fire your entire security team. There isn't a circumstance I can imagine where this reflects well on Patreon internally.