Posts

A Bit about Dossiers: You’ve Been Eating this FUD for Years

NB: Note the byline — this is Rayne, with what might be another minority report.

Once upon a time in a nearby galaxy in the not-too-distant past, I worked in competitive intelligence. I gathered information about large technology companies’ competitors and summarized it into reports — dossiers, if you will. These firms made product decisions after reading these reports. Thanks to non-disclosure agreements I can’t tell you which companies or products, but know that if you are reading this you have been in contact with their goods and/or the long-term impact of their products and services.

The technology you’ve used or been in contact with has been shaped by these same dossiers.

My research was based on publicly available information. No sneaking around inside fence lines with false identification or hacking servers and networks to pry open locked-away goods. No flights overseas to slink through alleys into dark pubs with shady characters. I was armed with my native curiosity, a decent computer, both internet and library access, and a background in Fortune 500 report writing.

These companies took my work and used it in what is corporate warfare. It goes on around you every day, skirmishes and battles for your wallet and attention, volleys lobbed by hard and soft goods manufacturers and retailers, by firms selling services and intangibles. You think of this as marketing and often consciously blow it off.

Some of this corporate warfare is negative, openly bashing competitors based on comparative price and quality. But some of it is far more insidious; it attacks brands in a way designed to inspire long-term avoidance of entire product lines and brand names, and based on fairly flimsy information. Sometimes it’s just plain false — truly false misinformation and plausible disinformation.

But isn’t some of this fraud, you might ask? Hah-hah. Good luck proving it and making a case. Disinformation is particularly weaselly because it is plausibly true, plausibly deniable.

And I would bet dollars to donuts you’ve made tens and hundreds of purchasing decisions in your lifetime based on disinformation, perhaps even disinformation created from my dossiers. This is the point of corporate disinformation campaigns: to dissuade you from supporting their competition.

As a researcher I often ran into laundered information. For example, it might be disseminated as a small press release in another country in a language Americans don’t often bother to acquire any level of fluency. The press release may get picked up in another country, then by an English language media outlet which reports the content now two degrees from origin as news. Presto: what was once the direct output of a corporate entity is now news upon which buyers make decisions.

Is there media complicity here? Sure, to some degree; the point of origin may be lost and the first news outlets may not perceive the importance of information’s provenance because to them the origin is still visible; witness this week’s reporting by U.S. news outlets all ultimately relying on a single German business paper’s report. But the news media doesn’t bear all the culpability here. News consumers in the U.S. have been notoriously lax in validating content for decades.

It’s unsurprising given the antiquity of the admonishment, Caveat emptor. It has long been a problem that consumers of goods whether information or products and services must be more skeptical before committing their wallets and health, let alone their votes.

Social media has only made the job of laundering information even easier, between the number of washings platforms can offer and the automation of repetition, scale, and dispersion, all for a pittance. Over the last ten years the work I did as a researcher has become incredibly difficult; tracing the origin of a single piece of highly controversial or relatively arcane news originating overseas is like swimming against a mighty current.

And much of that current is deliberately crafted “alternative narrative” (pdf) — disinformation.

You may look askance at information laundering about products and services. Don’t. My own work was laundered not once but twice that I’m aware of. I wasn’t a marketing department employee at the firms which contracted competitive intel research. Nor was I an employ of the small firm contracted by these Fortune 100-1000 firms needing my services. That’s two removes and I am sure there was at least one more — the work I did was probably restated and re-presented internally, at a minimum.

Immaculate information conception — you were sold a bill of goods without knowing I was at the other end of the food chain. You never saw my fingerprints, heard my heels on the pavement, or caught a whiff of my perfume, even though in one way or another you have been touched in the last decade by decisions made based on my research.

~ | ~

You have been eating the FUD prepared for you — fear, uncertainty and doubt which gave you pause and made you choose something else. FUD has long been a tactic of technology companies; billions in sales have relied on its use. Entire industries have depended on it, created wholly from competitive intelligence dossiers like those I’ve prepared.

And yet concern trolls tell you Russia wasn’t a factor during the 2016 and that ‘fake news’ played no role whatsoever in Trump’s election? Bullshit. Russia’s culture and government make Silicon Valley look like pikers when it comes to the development and use of FUD. Social media and the decades-long reflexivity of right-wing media only served to weaponize Russia’s FUD against the U.S. We never saw it coming because we bought our own nonsense disinfo of American exceptionalism and western democracy’s inviolability.

Out there on the internet in either social media, public records, or leaked data is your voter records, disclosing your location, your state/congressional district/precinct, your voting habits; your vehicle records, your home address; your telephone number, your social media accounts and the network of family and friends and businesses with which you choose to associate. Add your purchasing habits from buyers’ loyalty cards and subscriptions, your fast food purchases when not made with cash. Your debts, whether your small business’ Dun & Bradstreet report, your mortgage, and now your personal credit record (thank you so much, Equifax). Your entire life can be digitally reconstructed to reveal your soft underbelly: what is it that makes you wake up at night in a cold sweat?

It takes little for corporations to identify and target you with an ad to make you doubt another company’s product. I don’t even have to weed through all sources I once mined and aggregated to tell them what you were thinking about Competitor X’s product Y. You’ve already told the world and the places you’ve connected to have shared it. There are simple algorithms to harvest what’s needed, quickly and cheaply.

You are not exceptional nor inviolable because you have been conditioned to exist in this information matrix. You have made little effort to pan golden fact from streams of manufactured information, too eager to swallow misinfo and disinfo because it’s easy — plausible, palatable, hits you right where you are most sensitive and vulnerable.

And yet concern trolls tell you a competing nation-state wouldn’t have used this against you, inserting FUD in a way that furthers their interests above our own, though trillions of dollars benefit at least one nation-state to do so? Though a competing nation-state’s disinformation campaign may have a very low benchmark of success, merely to dissuade you from wholeheartedly supporting restrictions against them?

Hah. Sucker. I have some technology to sell you.

~ | ~

Now here’s the part where I get annoyed with the friction over the Steele dossier. I have reasonable confidence in Steele’s findings. But this doesn’t put me in the same camp as folks who believe the dossier is gospel truth waiting to be decoded into trial-worthy evidence. My confidence separates me from those who pooh-pooh the dossier as ‘fake news’.

The fundamental problem with the public’s understanding of the dossier is the dossier’s utility. It is like the documents I prepared for technology companies — a competitive intelligence report, designed to inform its purchaser about the weaknesses and threats a competitor poses, or the most sensitive point where a competitor can be attacked. It’s not a full-blown SWOT analysis (strengths, weaknesses, opportunities, threats) as the dossier is an external view; it’s closer to an inverted SWOT looking at a competitor excluding any internal perception of the client and its place in the market. It also doesn’t have to be one hundred percent accurate — just reasonably close for the marketing equivalent of a grenade or a Daisy Cutter as the situation dictates.

The friction on the left exists because nearly everyone with a published opinion on the Steele dossier doesn’t see it as a marketing document which should have helped a purchaser develop the political equivalent of the Four Ps — product, placement, promotion (pricing doesn’t really work here, apart from ensuring messaging includes the opportunity costs of electing the right/wrong candidate).

The Clinton campaign nor the dossier-purchasing campaign before it would not necessarily take the Steele dossier as evidence in a legal sense, just as the marketing documents I prepared weren’t evidence. I didn’t get sworn statements and multiple corroborating witnesses to disclose what competing technology companies were doing; neither did Christopher Steele or his intermediary client(s) do this about candidate Trump. (It kind of runs up a flag to your targets when you ask a witness to swear out a statement in front of a notary — so much for gaining a competitive edge.) But just as the firms who bought my services trusted me to gather reasonably accurate information sufficient to make a marketing decision, so, too, did Steele’s clients trust him to do the same. (Just as an aside, it’s rather amusing so few ask how such trust is generated.)

In short, competitive intelligence dossiers are not evidentiary. They’re aggregations of reasonably accurate information for the purpose of making a marketing decision, whether the dossier’s user is a product, service, or a campaign. They help a client look forward. They aren’t designed to lock down and set in stone facts for retrospection. And in most cases, competitive intelligence dossiers try to capture a moving target; they work within a narrow time frame because the field can change rapidly.

Think about a technology company approaching someone like me today for competitive intelligence. What use would the dossiers I prepared years ago be today? They don’t capture the competitive environment in which products now go head to head. I can think of multiple competitors I followed and wrote about in my dossiers which no longer exist. In the technology sector, the landscape can change overnight. What in the Steele dossier has changed if a Trump competitor were to try and use it today?

Argue all you want about the Steele dossier. In the mean time, the competition has been drafting a more fluid dossier on us, shifting their information warfare, I mean, campaign to persuade us to their cause or to our detriment, serving up fresh, hot FUD you may all too willingly consume. For all you know, the friction itself is a direct result of disinfo-created FUD.

Monday Morning: First, Same as the Last

Hear that sound? Like so many sighs of resignation? Yup, it’s the first Monday of the new year, and with it, a plethora of shiny resolutions slowly breached and broken like WiFi-enabled toys.

One of my 2016 resolutions (which I hope will last more than a week) is a morning update here at emptywheel. Won’t be hot-urgent-newsy, just stuff worth scanning while you have a cup of joe. Let’s see if I can stick it out five days — then I’ll try another benchmark.

Droning on
Did you get or give a drone as a gift this holiday season? Better make sure it’s registered with the Federal Aviation Administration.

Twitter to bring back Politwoops
Among the stupid moves Twitter made last year was the decision to shut out Sunlight Foundation’s Politwoops platform. The tool archived politicians’ embarrassing tweets even if the tweets had been deleted. With the general election season now in full swing, voters need more accountability of candidates and elected officials, not less. Sunlight Foundation and the Open State Foundation negotiated with Twitter to restore the tool. Let’s hope it’s up and running well before the first caucuses — and let’s hope Twitter gets a grip on its business model, pronto.

You’d think by now Twitter would have figured out politicians’ tweeted gaffes are gasoline to their social media platform growth…

Microsoft spreads FUD about…Microsoft?
If you’re an oldster IT person like me, you recall the Halloween memo scandal of 1998, documenting Microsoft’s practice of promulgating fear, uncertainty, and doubt (FUD) about competing operating systems in order to gain and control Windows market share. For more than a decade, Microsoft relied on FUD to ensure near-ubiquity of Windows and Word software products. Now Microsoft is using FUD not to prevent customers from using other products, but to encourage migration from Windows 7 to Windows 10, to reduce possible state-sponsored attacks on Win 7 systems.

Personally, I think Microsoft has already been ridiculously ham-handed in its push for Win 10 upgrades before this latest FUD. If you are a Win 7 or Win 8 user, you’ve already seen attempts to migrate users embedded in recent security patches (read: crapware). I’ve had enough FUD for a lifetime — I’m already running open source operating systems Linux and Android on most of my devices. I would kill for an Android desktop or laptop (yoohoo, hint-hint, Android developers…).

And don’t even start with the “Buy Apple” routine. Given the large number of vulnerabilities, it’s only a matter of time before Mac OS and iOS attract the same level of attention from hackers as Windows. I’ll hold my AAPL stock as long as you insist on “Buy Apple,” however.

Consumer Electronics Show 2016 — now with biometric brassieres
CES 2016 opens this week in Las Vegas, and all I can think is: Are you fucking kidding me with this fresh Internet of Things stupidity? A biometric bra? What idiot dreamed this up?

Why not biometric jockstraps? I can only imagine the first response to biometric jockstraps: “No EMF radiation near my ‘nads!” Yeah, well the same thing applies to breasts. Didn’t anybody get the memo last year that 217 scientists have expressed concerns about EMF’s potential impact on human health, based on +2,000 peer-reviewed articles?

Or are businesses ignoring this science the same way petrochemical businesses have ignored climate change science?

Phew. There it is, the first checkmark of my 2016 resolutions. Happy first Monday to you. Did you make any New Year’s resolutions? Do tell.

Fear, Uncertainty, and Doubt: the Real Cyber Attack on the Truth [UPDATE]

[photo: cdrummbks via Flickr]

[UPDATE – see end of article.]

One weaselly senator–with long-identified agendas and a pathetically thin understanding of technology–takes to the microphone. Suddenly, by virtue of wrapping his senatorial lips around a few scary words on topics about which he knows little, we citizens are supposed to quake in fear and plead for salvation.

Screw that noise. This is textbook  “fear, uncertainty, and doubt” — more commonly referred to as FUD in the information technology industry.

Since the 1970s, FUD tactics have used to suppress competition in the computer marketplace, targeting both hardware and software. Roger Irwin explained,

…It is a marketing technique used when a competitor launches a product that is both better than yours and costs less, i.e. your product is no longer competitive. Unable to respond with hard facts, scare-mongering is used via ‘gossip channels’ to cast a shadow of doubt over the competitors offerings and make people think twice before using it.In general it is used by companies with a large market share, and the overall message is ‘Hey, it could be risky going down that road, stick with us and you are with the crowd. Our next soon-to-be-released version will be better than that anyway’. …

FUD has non-technology applications as well; one need only look at product and service brands that encourage doubts about using any product other than their own, in lieu of actually promoting the advantages their product or service might have.

So what’s the FUD about? Senator Joe Lieberman spouted off about cyber attacks in September last year, claiming Iran was behind disruptive efforts targeting U.S. banks.

Right. Uh-huh. Predictable, yes?

But FUD is used in situations where there is competition, one might point out. Yes, exactly; in September 2012, the case for support of unilateral attacks against Iran was up against the news cycle crush, powered by the post-Benghazi fallout and the drive toward the November general election, followed by the terror that was the “fiscal cliff.” That’s a lot of powerful, compelling competition for both attention, votes, and tax dollars, when members of a reliable but lame duck Congress could be mounting up a pre-emptive cyber war without the headwind of public awareness and resistance, or the too-inquisitive pushback from newbies in the next seated Congress. Read more