just found out my email was in a data breach.

a couple of years ago i watched a mark rober video about this glitter bomb anti-theft thing, and i noticed the service he was using to track the thing had a map that looked like openstreetmap, and i didn't see any attribution. as an osm contributor (at the time) i thought i would investigate, so i signed up to the service, tracki, with a throwaway email. and, as i saw in the video, they were using osm data without attribution, which is illegal. 1/

so, i sent tracki an email and added them to the unfortunately long list of entities violating osm copyright.¹ (they were still violating it months after i alerted them)

anyway, fast forward 2 years, and i start receiving sign up confirmations for like, random help desks? so i looked my email up on haveibeenpwned.com and read about its hack and other shenanigans by @maia,² which might explain why some of the help desks are israeli(?) 2/

[1] https://osm.org/wiki/Lacking_proper_attribution
[2] https://maia.crimew.gay/posts/gps-track-deez-nuts/

Lacking proper attribution - OpenStreetMap Wiki

why is my email in the breach if i signed up with a throwaway? well, i (stupidly) used my personal email to contact tracki.

but what i don't understand is why *now*, ~a year and a half since that hack, and also why at all if (from the article) tracki supposedly patched their shit?

but anyway, good news is i found out about a very cool blog. and also #FuckStalkerware 3/3