I don’t have an alternative for you, but if selling out your users and violating their trust and consent (and, by extension, fraudulently claiming that published cryptocurrency addresses represent payment addresses for your users) is the best you can think of, then perhaps you should give up and stop existing as a concern. Keybase, I understand that you have no good revenue model. There is no option to remove this payment address from my Keybase profile, turning my Keybase profile page into an ad for a shitcoin, using my name, face, and identity as an implicit endorsement for Stellar.
Note: DO NOT send payments to this address! I don’t have the keys for this address, don’t control this address, and don’t want any XLM shitcoins even if I did–despite what Keybase’s client has claimed with my private keys.
NOT QUALIFIED FOR KEYBASE AIRDROP SOFTWARE
But in this instance, Keybase’s software decided to sign, for a user, without their knowledge or consent, an attestation saying that username*keybase.io is a legitimate stellar payment address for the user-even if the user has never heard of it. Of course, the user controls their keys using Keybase’s software, which, under normal circumstances, means the user controls their keys. This is done without any user interaction or consent, violating the fundamental principle of Keybase’s product until now: the user controls their keys. Keybase updated their iOS client to sign an attestation, as a user, that a given stellar address belongs to them, even if it does not. It seems that Stellar, the extremely well-funded and well-marketed cryptocurrency, has struck a deal with Keybase to “airdrop” (give away) their tokens to keybase users in an effort to drive adoption.
Keybase’s iOS client has received a backdoor.
0 kommentar(er)
