Hacker, blogger, journalist. The question of what to call Keith Ng (he called himself a blogger) has been a fascinating subplot since he exposed the gaping security hole in Winz kiosks.

The second part of the Deloitte report into the breach, a direct result of Ng’s work, calls for a new senior manager responsible for information, and a complete replacement of the kiosk workstations, while exonerating the ministry of a wider culture of info-insensitivity.

It mentions Ng by name nowhere, but assigns him a new designation, which may or may not be regarded as a demotion. He is “a member of the public”.