Not gonna lie, feeling pretty vindicated right now. Persona’s source code was just accessed and reviewed, and inspection showed that there are backdoors through their entire system for several different justice agencies. I haven’t read through the entire article yet, only up to section 0x0A, but this is a nightmare.
To give some examples, users of Persona are gauged by, “Is this person a politically exposed person,” comprehensive profiles of their users identifying information, scans against photos scraped from the internet to match if you are the one in that photo.
I know, the mentality “They already know everything about you” is out there, but dude this is really, really bad. Worse than what I was imagining, and everyone who used Persona for verification has just given their service all these connections.
Turn your volume down before opening the link in public. Someone thought it would be a good idea to have background music.
As an add-on, I really like VrChat, and really want to verify, but its largely because I can’t trust that service that I’m being held back from doing it. I know eventually that investor capital must be returned, but surely Persona isn’t the best of the options, is it?
It actually seemed like the better of the options when it was first being implemented. It’s disappointing that all this nonsense came to light after implementation.
