Since delving into the idea of PII as a weapon in Ferguson, MO, a couple weeks back, I've been struck repeatedly by the way that personal information, and the ready access to it that the Internet provides, is being used to create some serious real-world damage.
Let's just take a peek into the gaming world, where anonymity and online personas are as developed as anywhere on the Internet. These are people who live online, who have made their presence online so constant that the online channel Twitch, where people literally spend their days watching other people play video games, just sold to Amazon for a billion dollars. And their lives online are both incredibly public—often with live streams of their faces being broadcast for hours a day—and shrouded in anonymity and pseudonymity.
They have screen names, Twitter accounts, Reddit accounts, alternates for those accounts, profiles on video-gaming message boards—all of them linked to create online identities that can be incredibly powerful. Who runs the all-time most-viewed channel on YouTube? A dude who goes by PewDiePie and just surpassed 30 million YouTube subscribers. His schtick? He comments on video games while he plays them.
Thirty million subscribers means real money. The video-game industry is large and growing, with huge revenue. In fact, in many ways it mirrors the early days of rap music, when money started flowing in and people started paying attention. However, instead of feuds being played out in the streets of Las Vegas, they are played out generally online, through aggressive comments and some of the foulest language and imagery you can imagine (lots of stuff I could link to, but this is a family operation here at the IAPP).
Jed has written plenty about the issues of trolling and how it adversely affects women, particularly (women also don't often fare well in rap music).
Lately, however, these online feuds have begun spilling more and more often into the real world, affecting both women and rival gamers, and even causing privacy headaches for authorities.
Take the case of Feminist Frequency's Anita Sarkeesian. She's doing important work in the video-gaming space, outlining the sexist underpinnings of the gaming industry and trying to make gaming a more friendly place for women (who, surprisingly, now reportedly make up more than half of all "gamers"). Of course, since she's a woman making a pro-woman argument on the Internet, she's often subjected to the vilest stuff you can imagine.
As you'll see from her Twitter profile, she yesterday had to remove her family from her home as she received death threats. The scariest part? The man making the threats had uncovered the location of her home, and that of her parents, and posted them online. How's that for PII as a weapon? Unfortunately, that's fairly standard practice.
But now rivals are taking things a step further. There is a new tactic called "swatting," where gamers call in reports of active shooters in the locations of their rivals, causing the cops (or SWAT team) to show up, often more than ready to bear, as the threats often say that the shooter is waiting in a specific room and is waiting to fire upon any officers who enter the room.
You can see the results here, as gamer Kootra finds himself swatted (skip to about 6:30):
Now, this was a place of business, and it's perhaps not fair to call their address PII, but look at what happens: An innocent person is thrown to the ground, handcuffed with a knee in the back and then interrogated. Yes, it's crazy that he actually quickly realizes what has happened and kind of finds it funny, but some of these kids play these games with prop guns and wearing crazy headgear and walking on an octagonal treadmill. What would the cops have made of that? Might they have fired?
Further, the consequences of the incident aren't just the physical effects of the raid on this company's offices, but the man's privacy is violated as well, when the officer quickly snatches up his phone and begins paging through it. The Denver Post theorized that Colorado officers would have to change their methods following the Supreme Court ruling surrounding cell-phone searches.
Does it look like the officer had a warrant before searching that phone?
And how about this clown calling himself @ScrewPain, who is claiming responsibility for the "prank" of "swatting" @Kootra? Should Twitter give up details about his identity to law enforcement? He's basically admitting to committing a crime, one that could have had serious consequences. But I'm sure there are those who would argue that Twitter shouldn't participate with law enforcement without more evidence than what could have been a joke or a false claim of responsibility for yucks.
Finally, it's hard not to wonder about the psychological effects of operating so much of your life online and in anonymous or pseudonymous fashion. Do you begin to see your actions as not "real" since you're constantly playing them out in virtual space? Do you get ideas of grandeur after killing off a million other gamers with your virtual automatic weapons, under a false name? Do you begin to feel there couldn't possibly be "real" consequences?
Maybe most of these questions don't matter to most privacy pros, but I'm betting a lot of you operate online forums and spaces where anonymous people threaten and harass people on a daily basis. What is our responsibility if we've created that space and monitor it?