Sign in

Jeff Kazzee

@jeffkazzee.bsky.social
35 followers 40 following 69 posts

Independent Researcher in Agentic Nonsense, Software Archaeology, and Digital Shenanigans. <3 All fuzzy fiends and good boys. Zo Computer Ambassador.

PostsRepliesMedia
Jeff Kazzee @jeffkazzee.bsky.social · 15/09/2026
I also emailed them directly, here is email #1
000
Jeff Kazzee @jeffkazzee.bsky.social · 15/09/2026
7/ Delete your account? The cleanup deletes your verification history and leaves the photos. The photo files have random names and nothing in the app knows which are yours. The same file says, in a comment, that your sign-in history with IP addresses is kept after delete. On purpose, since 2020.
Ruby code from the User model. Line 33: has_many events, comment "we are retaining events after delete." Line 34: has_many devices, comment "we are retaining devices after delete."
100
Jeff Kazzee @jeffkazzee.bsky.social · 15/09/2026
6/ A second copy is built to go to GSA's own fraud database. A job there decrypts each record and keeps it 366 days: SSN, birthday, address, ID number, IP, device ID, and the keys to your photos. Public code too. github.com/18F/identity-reporting-rails/blob/main/config/pii_retention.yml
A YAML configuration file. retention_days is 366. Under schemas, fraudops, included_tables lists encrypted_events and decrypted_events.
100
Jeff Kazzee @jeffkazzee.bsky.social · 15/09/2026
5/ In June 2026 that became the rule on purpose. One switch now stores photos for every person who verifies, not just people headed to an agency on the feed. Whether that switch is on today lives in a private config. I can't see it. Neither can you. github.com/18F/identity-idp/pull/13233
Ruby code, lines 206 to 211 highlighted. A method named doc_escrow_enabled returns true when the doc escrow flag is on and either the historical attempts flag is on or the service provider has the attempts API enabled
100
Jeff Kazzee @jeffkazzee.bsky.social · 15/09/2026
4/ July 2025. The team merged a fix. Their words: "all Acuant proofing images were being saved to the s3 Bucket, rather than just images for the allowed service providers." For weeks, everyone's ID photos, not just IRS users'. No public notice I can find. github.com/18F/identity-idp/pull/12351
A GitHub pull request description. Under "Summary of changes" it reads: We had an incident with the Attempts API where all Acuant proofing images were being saved to the s3 Bucket, rather than just images for the allowed service providers
100
Jeff Kazzee @jeffkazzee.bsky.social · 15/09/2026
3/ The code, fifteen lines. Make a random key, encrypt your photo, save it to a GSA storage bucket under a random name, then put the key and file name in a record that goes to the partner agency's fraud feed. The report names one partner: the IRS.
 Ruby code from login.gov's repository, lines 14 to 28 highlighted. A write method generates a random 32-byte encryption key, names the file encrypted_images slash a random UUID, encrypts the image, and returns the name and the base64 key.
100
Jeff Kazzee @jeffkazzee.bsky.social · 15/09/2026
2/ The report, March 10, 2026, page 12. Your ID photo and selfie: "Stored within Login.gov: No. Shared with Agency Partner: No." Footnote 22: "Once state-issued ID images have been processed for authenticity, Login.gov does not store them." gsa.gov/system/files/Login_PIA_(March_2026).pdf
Table from the GSA Login.gov privacy assessment. Rows for state-issued ID image and self-photograph read "No" under Stored within Login.gov and "No" under Shared with Agency Partner. Footnote 22 says Login.gov does not store ID images after processing
100
Jeff Kazzee @jeffkazzee.bsky.social · 25/08/2026
I made an arcade in a tool called Dyad where AI codes every game. 14 playable in the browser today, more coming, and there's an upload flow if you want to build one yourself. Genuinely impressed with what a free desktop app pulled off here. llmarcade.fun / dyad.sh
000
Jeff Kazzee @jeffkazzee.bsky.social · 10/08/2026
Dark factories are all the rage. Mine needed 7 image calls for 3 accepted results. Four failed. I saw none of it. Software is a graph, model capability changes from job to job, and proof earns every dark stretch. jeffkazzee.substack.com/p/turn-the-l...
Square illustration of a conveyor becoming a capability graph
000
Jeff Kazzee @jeffkazzee.bsky.social · 09/08/2026
Zo Deep Dives is live after a full rebuild. There are 85 detailed Zo Computer guides with exact steps, safety limits, verification tests, sources, diagrams, and working artifacts. Start with the problem already wasting your time: deepdives.zocomputer101.wiki
Editorial illustration of an open field manual surrounded by six separate guide cards. Blue, rust, black, and cream diagrams represent reports, source checks, approvals, and safe stops.
010
Jeff Kazzee @jeffkazzee.bsky.social · 19/07/2026
this is Hoolio. he's the mentor. owl, cardigan, unbothered. show him what you tried and he gives you one hint. no attempt, no help. that's the whole product.
chest-up portrait, the owl looking directly at the
viewer with the faintest knowing smile, one eyebrow-tuft slightly raised,
wings crossed. Plain deep charcoal-navy background, subtle warm rim light.
000
Jeff Kazzee @jeffkazzee.bsky.social · 19/07/2026
new tool I'm building: Journeyman. an AI mentor that won't do your homework. paste job ads for jobs you want, get a plan with receipts, earn hints by showing real work. ask cold and it politely says no. demo's live. #buildinpublic #AI
150
Jeff Kazzee @jeffkazzee.bsky.social · 15/07/2026
Frickin' love my little good boy. He loves the water so this is a constant for him. Always dripping wet because I live close to the river. Lucky's such a happy-go-lucky fella.
000
Jeff Kazzee @jeffkazzee.bsky.social · 08/07/2026
My GitHub graph is starting to snitch on me. While everybody else had hot girl summer. I had hot git summer. No beach pics. No yacht. No mysterious European vacation. It's just me, my laptop, too much coffee, and a GitHub contribution graph that finally started looking like it had a pulse.
000
Jeff Kazzee @jeffkazzee.bsky.social · 07/07/2026
63% of new startups this year are solo-founded. The gap between the best and the median solo founder is now 61x. Most solo founders fail. The ones who didn't took a decade and aimed lower than a billion. The humble version of the solo founder pitch: open.substack.com/pub/jeffkazz...
010
Jeff Kazzee @jeffkazzee.bsky.social · 04/07/2026
The new Vivary release is the one I wanted from the start: it works on projects you already have. tropo map reads any repo/vault into a map. create-vivary adopt makes it agent-native without touching your existing files. doctor --trend watches for drift. vivary.vercel.app
000
Jeff Kazzee @jeffkazzee.bsky.social · 03/07/2026
Every good prompt has the same flaw: it forgets you when the chat ends. So I open sourced Growth Engine a growth strategist with memory It tracks your commitments and scores your follow-through. Works in Claude, Zo, or any AI github.com/Jeff-Kazzee/growth-engine
100
Jeff Kazzee @jeffkazzee.bsky.social · 20/06/2026
7/ That is the version of AI I want. Pro-human. It makes the trying cheap and leaves the deciding to you.
000
Jeff Kazzee @jeffkazzee.bsky.social · 19/06/2026
I wrote the Zo Computer guide I wish I'd had on day one. Free, searchable, no email wall. zo-101-jeffkazzee.zocomputer.io
131