| It takes many bits to identify an individual. Let's say I offhandedly mention your email in this comment, for example, like we had an out of band conversation somewhere else. Then, someone takes that email and links it to another forum where they find your phone number. Then another person looks up that phone number in a phone book. Then another person finds your github account from the email associated with your PGP and finds where you work etc. Let's say a comment you wrote 7 months ago vaguely mentions something about where you live, which in combination with the previous information narrows it down to a single place. At what point does that become doxxing and who is responsible? Pseudonymous people nessisarially, slowly leak small amounts of information about themselves when on the internet in order to engage in communication. It is only when you collect "enough" bits of information that it becomes threatening doxx. You could say publishing this collection of facts is the doxx. But the point of the article is that stylometry and AI tools can do this investigation for you. Anyone can trivially assemble the collection themselves. I think ultimately, it's a matter of personal responsibility. It has to be. If you have perfect opsec, I can't touch you AI tools or not. And if I have perfect opsec and I'm doxxing you, then no laws will be able to catch up to me. |