Regarding The Recent Patreon Hack
Added 2015-10-02 11:07:45 +0000 UTCMy dear and beloved and sexy patrons,
You may have heard by now, but there was a security breach at Patreon recently. Patreon itself says there's nothing to worry about, that they took immediate action, and that the most you need to worry about is perhaps changing your password as a precaution.
Of course, it's in Patreon's best interest to say that. Ars Technica recently posted some worst-case scenarios that could occur as a result of the hack. These are currently NOT the scenarios in action.
The worst-case scenarios seem to affect content creators like me more than patrons like you. Your credit card details are safe and everything. My own social security number n' stuff? Maybe at risk.
Survival instinct tells me to just hope it all blows over and not draw attention to it, but I feel the responsible thing to do is just honestly tell y'all how it's shaking down, you fine folks who have kept me working and secure and happy this past year.
My own take on this? I'm not particularly worried. I have sadly resigned myself to the fact that this is just going to keep happening everywhere. You got an account somewhere, some bunch of slimy pricks will eventually hack it. Especially on a startup like Patreon, I guess it was grossly inevitable - not to mention little more than a "cause we can" display of power from some Internet randos. I fully suspect that this will all be forgotten soon without any tragedies occurring. Could be wrong, but that's my initial reaction.
I reckon the worst that will happen is that the Ethics Police might sniff through what details they can and find devs who may have been patrons in order to yell "CORRUPTION" at me and others. I updated my Jimquisition disclosures page weeks ago to address the notion of developers becoming patrons though, so whatever.
I'm not even mad at this point, just disappointed that it happens.
That's about the size of it. As always, my gratitude to you all cannot be stated enough. Thank you doesn't quite cut it, but thank you for all of your amazing support.
Love,
Jim.
(PS, I guess one other negative aspect is people might see how shameful my lack of replies to private messages are. Rest assured I do read them all, but finding the time to respond is hard. Again, thank you. Your kind words in messages are simply wonderful)
Comments
Replies are nice but I can imagine how much time it would take to respond to all of them.
Rawk Hawk
2015-10-05 21:02:48 +0000 UTCYeah, I got an email sent directly to my trash bin which was werid. And I had to change my password twice because patreon forgot what I changed it too. But your right basically any site can be hacked nowadays. So hopefully you and everyone else on patron, creator or supporters don't have anything stolen from them any time soon.
2015-10-04 06:25:15 +0000 UTCNot one mention of pogs. Shocking, yet not surprised. The coverup continues. Jim, you magnificent bastard, you.
Jason Livingston
2015-10-02 21:09:32 +0000 UTCI received an email about this from Patreon. I'm not overly concerned for my own security, but hopefully this won't affect your accounts in any way. We support you because we enjoy what you do with the JImquisition, so an attack on you is an attack on us.
2015-10-02 20:57:09 +0000 UTCI hadn't actually received a notice from Patreon. I have to hear it through their content creators. Weird... Thanks though.
2015-10-02 17:07:19 +0000 UTCReally do appreciate the honesty and your opinion on this.
Joshua Chap
2015-10-02 16:57:22 +0000 UTCJim, your class always well exceeds what's reasonably expected from someone with a 3+ foot long dildo. It's incredibly considerate of you to take the time to personally comment to your subscribers on the hack with full transparency and honesty. You'd think it would be common, especially with something like the direct patronage here, but these days it seems to be more the exception than the norm. I'm proud to call myself a patron of yours, and I increased my pledge because of this. It wasn't a lot, and I know that wasn't your intent at all, but I feel it's important to have people with your class and integrity (and above all, choice of toys) in this industry, so I'm glad to do what I can. Thank god for you.
Tom The Not Quite So Brave As Sir Lancelot
2015-10-02 16:01:45 +0000 UTCI'm not angry just disappointed... REKT! Jim just tore their a-holes asunder!
2015-10-02 13:31:00 +0000 UTCBeen with you since the beginning. That son of a bitch hacker, 4chan. He wont scare me off.
Johnomatopoeia
2015-10-02 13:26:03 +0000 UTCNo no no! #FuckingSterlingGateSon :P
2015-10-02 13:13:02 +0000 UTCPaying Jim to shit all over them every 2 weeks. That's actually the consistency i would expect from Konami after the events of the last few months.
artisticMink
2015-10-02 12:31:08 +0000 UTCNow they will find out about all the hentai game projects i'm supporting. Also inb4#SterlinGate
artisticMink
2015-10-02 12:29:37 +0000 UTCWhy does he need a birth certificate? You can see on his videos he was pretty much born already. Grown up quite a lot, actually.
2015-10-02 12:17:30 +0000 UTC<blockquote>I reckon the worst that will happen is that the Ethics Police might sniff through what details they can and find devs who may have been patrons in order to yell "CORRUPTION" at me and others.</blockquote>Meh. Even if you were on Konami's payroll, I still would fund your Patreon anyway.
2015-10-02 12:15:54 +0000 UTCThis was probably because of your constant misappropriation of our hard-earned tax dollars. WHERE IS YOUR BIRTH CERTIFICATE, MR STERLING?!
2015-10-02 12:00:08 +0000 UTCThanks for taking the time to make note of it - low key seems to be the way to address it. It does seem to me that you are more at risk than us. I have changed my password as a precaution. As far as the wider internet goes, I don't care who knows I support Jim Fucking Sterling Son.
Joe Jones
2015-10-02 11:32:02 +0000 UTCWhile it will happen again, from my work in the IT security field its still clear a lot of companies don't take their security serious enough and far too many (human) mistakes are made. This seems to be an example of this, if it was indeed an unsecured test server that was accessible from the outside. When will we learn?
2015-10-02 11:26:51 +0000 UTCThanks Jim. Like you, I have come to expect more of this. I've lost count of the number of times I have received emails about the possibility of my details being accessed when they should not have been. Not much we can do other than stay on top of our credit reports and change passwords/use different ones at different sites.
2015-10-02 11:22:49 +0000 UTCLeaked are e-mail addresses, all payments and all private messages. Password are likely not at risk, but it's still advisable to use a unique password on every site using a password manager (e.g. <a href="http://keepass.info/" rel="nofollow noopener" target="_blank">http://keepass.info/</a> , <a href="http://lastpass.com/)," rel="nofollow noopener" target="_blank">http://lastpass.com/),</a> as this is not uncommon and will 100% likely happen again. Want to know information about your email has been leaked? <a href="https://haveibeenpwned.com/" rel="nofollow noopener" target="_blank">https://haveibeenpwned.com/</a>
FooBar
2015-10-02 11:14:36 +0000 UTC
