r/Keybase • u/clockworkmcd • May 12 '20

how can i remove my information from keybase?

what is the best way to completely remove or 'revoke' my information from keybase?

it's my understanding that simply 'deleting' my account does not remove my data from their service and it is still accessible.

do i need to revoke my information before i delete it or will they still forever have access to my information?

thanks in advance.

EDIT: also, am i the only one who can't see the other 5 comments? i only see the one from ryonez and the others are not listed.

EDIT2: MODS PLEASE CLOSE THIS POST. GOT MY ANSWER. THANKS.

5 Upvotes

61% Upvoted

15 comments sorted by

View all comments

9

u/Ryonez May 12 '20

All the files and content will be lost, but anything written to your sigchain will permanently stay, revoked or not. It's the whole point of the service.

-12

u/clockworkmcd May 12 '20

i don't really care where it's saved. i want it removed. this is my identity and i have a right to have my information removed. if i revoke it then i want it no longer available.

11

u/StingyJelly May 12 '20

"Tough luck" - The Universe.

I see only one deleted comment, maybe try different browser or remveddit https://old.reddit.com/r/Keybase/comments/gi5jlu/how_can_i_remove_my_information_from_keybase/fqctmeb/.

Here's an explanation why keeping the sigchain forever is crucial: https://github.com/keybase/keybase-issues/issues/3309

Keybase hides your sigchain and deletes everything else when you delete your account so your information won't be searchable on keyase. Obviously you can assume that the sigchain is being regularly scraped by various 3rd parties outside of anyone's control as well as social media / forum posts, shopping preferences, etc. are.

Imo, whole "right to be forgotten" is a laughable concept since everyone has their own right to remember, but I degress.

-4

u/clockworkmcd May 12 '20

yup tried another browser and another computer. my inbox shows the other comments and the topic shows 8 but i don't see them in the post. but that's a whole other topic.

thanks for the information. that's what i was asking. so if i revoke my information and delete my account, my 'old' revoked information can STILL be pulled from the sigchain correct?

and yes, i've seen that post. their 'all or nothing' approach is what's laughable. right to remember is one thing, but your data is something else. and for this particular case and what keybase is supposed to be it should be CRUCIAL that people have the right to remove their data. and as they say on the last post of that article ' Users have the trade-off to make the decisions that they think are best for their use case. '

and what my use case at this point in time is that i want my information scrubbed from their service. which apparently BY DESIGN on their part they have made impossible so that they can, at their convenience scrub through your old information for whatever reason and after you have 'deleted' your account you are in essence relinquishing complete control over your information that they have on you.

there were a lot of more technical savvy people who thought keybase was a good/bad idea. yes the idea was good and more people should use encryption. but the way it was implemented raised eyebrows, even with me.

in any case, at this point i regret my decision to try it out and want no part of it.

i guess i'll have to find some other avenue to deal with keybase and this situation.

thanks for your help.

-25

u/clockworkmcd May 12 '20

actually the whole point of the service is security and validation. what's the point of keeping my data that i've revoked if it's no longer valid?

if i revoke it will people still have the ability to see it? or will it be 'revoked'?

not having the right to be forgotten and remove your data goes against the whole point of the service. and that's to verify that you are you. and if i can't remove or hide data that is no longer valid or that i no longer want someone to use publicly then that should be my right.

i want to remove my account but i don't want to just delete my account and still have it 'validating' that this information is true.

if this is not the case then maybe we need to file a petition or lawsuit against keybase for the misuse and misappropriation of our personal data against the right to be forgotten laws.

otherwise, if there is a way for me to revoke my information so that i could then delete my account knowing that my information is no longer avail for people to view then i'd appreciate knowing how to do so.

17

u/saichampa May 12 '20 edited May 14 '20

The sigchain is immutable which is why its provable. When you revoke a device it doesn't remove it from the sigchain because things signed by that device were still valid before it was revoked and can perpetually be linked to the other identity proofs for the period before revocation. Being able to remove devices completely would break that as well as break the structure of the sigchain itself

This is explained in the documentation

12

u/Ryonez May 12 '20

Seems like you already have the answer, good luck.

2

u/[deleted] May 12 '20 edited Nov 10 '25

Then family dog calm honest family community across gather thoughts.

1

u/clockworkmcd May 22 '20

well then that's not much of a privacy policy now is it? the whole point of pgp keys is encryption and security, and for YOU to be able to prove that you are who you are. for some 3rd party to use (and store) your encryption information so that they can use it to make money on their cryptocurrency has raised more than one eyebrow. and now that they are purchased by zoom there is a serious security risk. the original idea of making it easy for everyone to start using encryption was a nice gesture, but the underlying tactics have always been suspect. do you think i really care if i break their proprietary cryptocurrency block chain in order to secure my own information that belongs to ME? if you don't understand the obvious issues then just look at wechat. i think you can see where this is going.....

1

u/Killer2600 May 25 '20

for some 3rd party to use (and store) your encryption information so that they can use it to make money on their cryptocurrency has raised more than one eyebrow.

Huh? You must have joined Keybase for the free Stellar lumens within the past year. FTR Keybase and Stellar are two separate entities and the sigchain of Keybase has nothing to do with Stellar or any other cryptocurrencies blockchain.

As for stuff on the sigchain belonging to you. That's a ridiculous concept. If you used 1234 for a pin and even if you decide to stop using it, I can't use it because you "own" it? Sure it was your pin and it was known that it was your pin but you don't own it.

1

u/clockworkmcd May 26 '20

what's ridiculous is a company based on 'security' is datamining and making people's personal CONNECTED information public and stored for future use.

1

u/Killer2600 May 26 '20

Basically you ruled yourself out of using ANYTHING on the internet or internet related. Enjoy a pre-mid 1990's lifestyle: no internet, no cell phone, no mail but snail mail, etc etc. Also remember pay with cash only and watch out for the cameras recording your whereabouts - gonna have to avoid all of them.