New from me, & my final piece of 2020:

In 2020, a false message board conspiracy theory harmed the pandemic response, significantly impacted our political process, & destroyed lives & families.

A deep dive into how QAnon's breakout year harmed us all:

I am seeing a ton of confusion about protecting yourself on the Internet. So as a retired bastard genius kid, I wanted to share my own experiences and knowledge in this.

DOXXING, PERSONAL CYBERSECURITY, ANONYMITY for the average revolutionary. A thread:

If you're a regular user of huge Internet services like Amazon, Google, Twitter, Facebook, etc., as well as over the age of 18, it's wise to assume that your personally identifiable information IS attainable and IS out there. These services all collect and save info --

to varying degrees, and to varying levels of security. And this information is VALUABLE. Data breaches occur frequently, retroactively, and unknowingly, and the data from said breaches are circulated around and cached in all kinds of easy-to-access places online.

Why does this matter? A (simplified) hypothetical: while someone probably can't find your street address from just your Twitter bio, if your handle is the same as your e-mail, and that e-mail is in a publicly available data breach with a street address attached, you're screwed.

Usually when doxxing happens, a much more elaborate version of said case happens. Doxxing really comes down to investigating all of an individual's available info and digital footprints, and narrowing it down to a single identity.

Yoga employs more Americans than coal. But compare and contrast 1/2

and 2/2

I think many of us carry in our minds an image of the US economy that looks like this

when the reality is this

and this

Facebook is a newstand. But no one can see which news Facebook is pushing to the top.

So we built an app for that called #CitizenBrowser. Our first finding: the sharp impact of Facebook’s political ad ban reversal in the Georgia Senate elections.
https://t.co/GZNdwZOlHW /1

This is the first report from our #CitizenBrowser project. There will be many more to come. But first, I want to tell you a bit about how we did it because it’s the most ambitious thing we’ve ever done @themarkup – and we do a lot of ambitious projects. /2

#CitizenBrowser grew out of conversations @suryamattu and I had about how to audit Facebook. We had both worked on browser extensions to collect data from Facebook, but FB always threatened to shut those down, just like their recent threats against the NYU AdObservatory. /3

But the bigger problem is that browser extensions don’t capture most FB activity. Most people use FB on mobile and browser extensions only work on desktop or laptop computers.

So one night, late at the WeWork, @suryamattu said to me: “We’ll have to build our own browser.” /4

“No way,” I said. “That’s insane.” But slowly, I came around. Here’s why: browsers are good at running in the background. Users could log into FB once through the browser and never use it again.

Then we wouldn’t be monitoring users. We would only be monitoring their feed. /5

I did more research into the Parler dump. What probably happened was not so much a "hack", but this: When Twilio/Okta shut them down, they just disabled email/phone verification to create an account. This means anyone could directly create huge amounts of accounts via their API.

Someone also found out that fetching Parler posts could be done by enumerating IDs (e.g 1, 2, 3) instead of random IDs that can't be guessed. Unclear if this was via the ordinary API endpoint, or that they found a separate one by monitoring app network traffic.

So you combine these two things and you can create a script to scrape all the posts on the entire platform, using a lot of different accounts to avoid suspicion. Anyone could download and run this script to spread it out over many IP addresses as well.

What I'm still not sure about is whether deleted (meaning flagged as deleted, it's common that services never actually delete data) posts could be fetched without any special handling.

The verdict: The people who wrote Parler are fucking amateurs.