Kicking off the last session of #enigma2021, @katestarbird is speaking about an extremely pressing topic: "ONLINE RUMORS, MISINFORMATION AND DISINFORMATION: THE PERFECT STORM OF COVID-19 AND ELECTION2020"
So much mis/dis-information in the last few months about covid: rumours about lockdowns, home remedies... and then conspiracy theories
This ... thing was taken viral by media and social media and spread so much mis/dis-information.
Mis/disinformation didn't start with the internet
* we've always been vulnerable to spreading rumours
* especially in times of crisis and anxiety
We engage in "collective sense-making" to try to soothe our anxiety in a crisis.
But this can go awry by making false rumours run wild and turn into misinformation.
Can also be exploited -- manipulators use crises as opportunities
COVID-19 is a perfect storm of uncertainty, lack of trust,
Election 2020 was a perfect storm as well: uncertainty and delay and lack of trust
Misinformation: false but not necessarily on purpose
Disinformation: is false, on purpose, and for a particular goal (e.g. financial or political). Generally a campaign, not just single pieces of content.
Pervasive disinformation erodes the foundations of democratic societies.
in 2016: foreign, inauthentic, coordinated
2020: domestic, authentic, organic/cultivated
Election integrity project performed rapid analysis of threats
started long before election: trump tweets, people make "evidence"
said "big if true" -- spoiler: not true
This is how this spread [diagram]
There was some disinformation on the left (mostly about removal of mailboxes) but *dwarfed* by the right
A week before the election put out a report on what to expect in the election and beyond [slide with lists of expected {mis/dis}information narratives]
We saw many of these types of narratives after the election. [breakdown of disinformation post-election]
[hash]sharpiegate [I am not summoning the hordes!]
Started with accusations then moved to disinformation
This is the spread starting ~2am on Nov 4th
Shift to AZ starts very closely when Fox calls AZ for Biden
Disinformation is participatory: Trump&co didn't just prime people to believe the disinformation, but to produce it
Elites set the agenda, audience made the evidence, elites echoed it back
The networks [mutually following accounts] are "wired" for disinformation
Saw on Jan 6th a physical, violent manifestation of this participatory disinformation
Twitter suspended a lot of accounts, but too late
Note: we pick on Twitter a lot, but that's only because they're open and let us research. The other platforms have these problems but we can't see as well
A lot of responsibility in the hands of these platforms, maybe too much
Can't fix it with a new feature or a few bans. Need to work together across industry, academic, civil society.
Need to rebuild trust to rebuild society.
[end of talk]
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Last talk of #enigma2021 by Marcus Botacin: "DOES YOUR THREAT MODEL CONSIDER COUNTRY AND CULTURE? A CASE STUDY OF BRAZILIAN INTERNET BANKING SECURITY TO SHOW THAT IT SHOULD!"
The outcomes I get from my analysis of malware I find in Brazil were quite different than what I saw in analysis of malware from other researchers. Why? Because the malware attacks were different!
The Brazilian banking system:
* let's move banking to computers (80s)to keep up with hyperinflation
* desktop clients for users... and the attackers migrated from physical to fake desktop app attacks -- that would only work in Brazil because that's where the banking was
Content note: this talk is about online abuse as some of the content may be upsetting
Got pulled into this after a screenshot of a class assignment sending folks to post on 4chan to post about race/gender/etc issues got posted on 4chan without the email address... so the 4chan folks thought it was @gianluca_string. It wasn't, but they doxxed and harassed anyway
This talk is going to go through the experience pushing the boundaries on sandboxing in the Chrome browser
What is sandboxing?
* breaking something into lower/higher privileged process
* necessary for browers, OSes, VMs etc.
Chromium uses to reduce the amount of privilege of the application: also to reduce the amount of privilege for code that touches websites (renderer)
* split different websites into different processes
* good defense against logic bugs (e.g. same-origin policy)
Next up at #enigma2021, Alex Gaynor from @LazyFishBarrel (satirical security company) will be talking about "QUANTIFYING MEMORY UNSAFETY AND REACTIONS TO IT"
Look for places where there are a lot of security issues being handled one-off rather than fixing the underlying issue
We tried to fix credential phishing mostly by telling people to be smarter, rather than fixing the root cause: people being able to use phished credential.
Zoom's launched end-to-end encryption 5 months after the white paper was published
* prevents eavesdroppers between users who are speaking to each other
* protection against compromised servers