Open Source Initiative (OSI) Reported to the California Privacy Protection Agency (Formal Complaint)
We are very carefully considering what to do, in due course, with a data 'leakage' at the OSI (elections are compromised and have been compromised for ages). Similar things put Andrew Alan Escher Auernheimer in prison.
The old saying goes (echoed quite a lot these days by databreaches.net), you don't need to hack and crack things that simply leak. The EPO had several leaking issues ("customers" data, not related to whistleblowers) that we reported before. If we reproduce here something that is already publicly accessible, does that count as unethical? Not sure, but we've made local copies regardless (to make a later cover-up harder). Regarding the OSI public list and privacy, taking note of a very serious issue (we don't want to give too many details as that might lead readers to the leaks), someone finally did something.
"Since there was an expectation of privacy," we learned from somebody, "and that was woefully neglected, I filed a complaint with the California Privacy Protection Agency. fyi."
Time will tell if a Cheeto-controlled California will take this seriously or just brush it aside like a head of state from Ukraine or "crypto" scammers (making scams the "new normal"). █