Do you have a dumb question that you're kind of embarrassed to ask in the main thread? Is there something you're just not sure about?
This is your opportunity to ask questions. No question too simple or too silly.
Culture war topics are accepted, and proposals for a better intro post are appreciated.
Jump in the discussion.
No email address required.
Notes -
How much should I care about being-opaque-to-casual-inspection level "opsec", given that I don't really care about actually being unidentifiable?
So I have this username on TheMotte. I have another that I use elsewhere. The other one is extremely easy to connect to my real life identity, to the point that I treat it like posting under my real name. I don't have the sort of spicy opinions that would make me a serious target for cancellation, but there's some stuff I've posted here that would probably have some social repercussions if people IRL knew that I'd written it. This is largely why I picked a fresh username here in the first place.
I'm under no illusions that it's impossible to get [dovetailing] -> [real identity] with some sleuthing. (I'm curious how hard it is, but there's no way it's even close to impossible.) What I'm a bit more concerned about is getting from a casual search of [real identity] to [dovetailing]. This has led me to divide up my posts across various places, and not cross-post links here to things I've written elsewhere, or share the same writing in multiple places. However, it strikes me that this may be an incorrect amount of paranoia -- not nearly enough to hinder the [dovetailing] -> [real identity] pathway for a serious inquirer, but more than makes sense if all I care about is someone I know personally, or a (potential) employer, casually searching my real name or my other username and getting my posts here.
So... what do you all think?
I have decided to assume that anything I say could be connected to my real identity if someone was sufficiently motivated. The result of this is not that I hide spicy opinions, but that I try to only say things that I'm willing to stand by. My life is structured in a way that I think I'm not really cancellable, or at least not for just one malicious actor.
Part of this is just that I kind of doubt I'm competent enough to do opsec that's worth a damn anyway.
Yeah, I don't say anything online that I wouldn't be willing to own. But I've been (slightly) concerned with two possible scenarios:
How would employers know any of your usernames in the first place?
More options
Context Copy link
More options
Context Copy link
More options
Context Copy link
In 2024, you should always care about opsec.
Why in particular do you think so? What are the risks that caring about personal opsec mitigates, how big are they, and how significant is the mitigation?
The risk I'm most concerned with is a phishing campaign against me, personally, specifically. Their end goal would be identity theft and causing financial damage.
Those tailor-made campaigns are much, much easier if you have a large online presence. And if done well, they are extremely difficult to defend against.
More options
Context Copy link
More options
Context Copy link
More options
Context Copy link
A related topic that I often think about:
By a quirk of fate, I share the name, both first and last, of a famous professional athlete. I wonder how much opsec that gives me, if any. Imagine someone called "Thomas Brady" - I'm sure there are hundreds of them. But if you Googled "Thomas Brady, Atlanta, Georgia," would you just get all the times Tom Brady did something in Atlanta?
So I've benefited from this. I have a relatively common name, and also a significant amount of discoverability on search engines using the correct search terms, but the ways most people search they instead catch one of the several people with wikipedia entries who have the same name.
I've had dates report this to me (women doing the usual stalking to figure out if someone is a creep), so I suspect you may be protected in the same way.
More options
Context Copy link
More options
Context Copy link
I think it's good general opsec to change handles over the medium to long term (6 months to 2+years depending on your risk tolerance). It's not just about posting spicy opinions, but the fact that the internet is forever and you don't know what advances in technology (AI scraping), the social landscape (authoritarians getting into power), and even your personal views and desire for privacy changing in the future. Swapping handles and being reasonably careful about dropping too much identifying information is just a good practice to get into and well worth the 5% of the time you'd like to share something but can't because it might let people/AI connect the dots.
My handle here is too similar to one I used on another forum, but I've since used a tool to overwrite past comments to cover my tracks. Even so I also wonder if I'm not being paranoid enough.
More options
Context Copy link
More options
Context Copy link