ChatGPT 5.6 helped me to fully reverse engineer save file format for a relatively-known game, and write a working serializer/deserializer to edit in-game currency. Reverse engineering is something I've always wanted to learn but now I am starting to question if it is worth learning manual reverse engineering at this age when AI can do it for us.
> To identify this person, the cops contacted Kik, but their subpoena accidentally requested information about the Kik user “fus_ro_dah” (one underscore after “fus”). Kik provided Klayme’s email address in response.
> Google records showed that this email address was used to access Google services from an IP address in Canada, so the Dane County investigators turned the case over to Halifax Regional Police. Halifax police took the IP address they had been given to local Internet provider Bell Aliant. Bell connected the IP address to the physical address of their subscriber, Brandon Klayme.
This is startling to me as it shows how easy to pinpoint exact location based on email alone.
And this is why IP addresses are often considered personally identifiable information under the GDPR, as impractical as that makes things like anti-spam/anti-bot.
GDPR requires a lawful basis for collecting and processing PII and one of possible lawful interest is "legitimate interests" that reasonable anti-spam/bot systems would fall under, i.e. ones that don't needlessly store the IP forever and don't use it for other purposes than security.