X/Twitter exposing user location in such a safety-positive way makes a modest dent in the EU’s approach to protecting personally-identifiable information

I’m confident a few privacy activists across Europe are seeking GDPR (etc) arguments to critique the mechanisms behind the location-based exposure of “Foreign, Fake MAGA Agents”; I disagree, but I think there will be ripples of positive & negative consequences until a new norm is established & understood. Of course I’m not the only one thinking this:

Another former employee, speaking on condition of anonymity because they are not authorized to speak about their work at X by their current employer, said the company had decided against deploying the idea in the past for two reasons: concern about creating a visible target for bad actors to manipulate and fear that the label could backfire. If a bad actor successfully spoofed a U.S. location, the platform would effectively be incorrectly verifying it as a trusted American voice.

It’s pretty simple:

• the fakes will adapt to look more credible
• the readers will trust the adaptations
• even greater transparency will be sought or demanded:
• user-via-vpn, user-via-tor-over-vpn, exposure of source IP’s “reputation”, deanonymisation via reputation-mapping attacks, GDPR lawsuits, exposure of source IP, faked source IPs, …
• lather, rinse, repeat forever

The only way to break this loop is not to play the game, but we’re not in that universe at the moment.

However: there are some worthwhile zingers in the comments, here:

Reddit:

Nikita Bier, X’s head of product development, said they’re working to resolve the use of VPNs to alter account location. How?

https://www.reddit.com/r/privacy/comments/1p4pkji/nikita_bier_xs_head_of_product_development_said/

#gdpr #onlineSafety #prvacy #xitter

https://foundation.mozilla.org/en/campaigns/no-data-for-surveillance-tech/

Stop Surveillance Tech: Protect Your Data

A new investigation reveals that ShadowDragon, a U.S. government contractor, is secretly collecting data from over 200 popular websites like Reddit, Etsy, Tinder, and Duolingo. This data is used to create detailed digital profiles, often without the platforms’ consent. Mozilla is launching a campaign urging these sites to block ShadowDragon’s surveillance tools and strengthen privacy protections.

#Prvacy #Security

FiSA warrantless global surveillance re-authorised for another two years

https://www.theguardian.com/world/2024/apr/12/what-is-fisa-warrant-surveillance #Snowden #Surveillance #Prvacy #HumanRights #Fisa