Every time I hear Matrix.org being mentioned, I giggle: https://matrix.org/blog/2019/05/08/post-mortem-and-remediati...
Describing their practices as sophomoric may be giving them too much credit.
Describing their practices as sophomoric may be giving them too much credit.
It's very embarrassing for sure, but tons of huge private corporations have been breached through worse mistakes than this. Making their Jenkins public was probably the worst decision. They explain why they did it, and it's not unreasonable (radical openness and transparency, basically), but they should've thought it through more.
In any case, this kind of posts is a reminder to stay alert and think critically; otherwise, we would believe many instances of misinformation without giving them a second thought. And we cannot expect others to downvote comments to oblivion or moderate them: it's something we ourselves have to be responsible for.
However, we have no reason to believe there was a link to the April incident.
However, the matrix.org security breach in Apr 2019 was unrelated to him, as far as we know.