Is Fake News a Security Risk?
Fake News and Security
So, is fake news a security concern? Lets have a look at a recent news item that is quite revealing.
Facebook held a news conference to explain what it is doing to remove fake news from its pages and consequently from our feeds. Oliver Darcy from CNN was waiting to ask a pointed question about one of the most prolific supplies of conspiracy based fake news, InfoWars.
When asked by Darcy about how the company could claim it was serious about tackling the problem of misinformation online while simultaneously allowing InfoWars to continue a page with nearly one million followers on its website, John Hegeman said that the company does not “take down false news.”
“I guess just for being false that doesn’t violate the community standards,” Hegeman said, explaining that InfoWars has “not violated something that would consequence in them being taken down.”
Hegeman additional, “I think part of the basic thing here is that we produced Facebook to be a place where different people can have a voice. And different publishers have very different points of view.”
“We work hard to find the right balance between encouraging free expression and promoting a safe and authentic community, and we believe that down-ranking inauthentic content strikes that balance. In other words, we allow people to post it as a form of expression, but we’re not going to show it at the top of News satisfy.”
“That said: while sharing fake news doesn’t violate our Community Standards set of policies, we do have strategies in place to deal with actors who repeatedly proportion false news. If content from a Page or domain is repeatedly given a ‘false’ rating from our third-party fact-checkers… we remove their monetisation and advertising privileges to cut off financial incentives, and dramatically reduce the dispensing of all of their Page-level or domain-level content on Facebook.”
So, based on that conversation you have to surprise if the press conference about fake news was anything other than, well, fake news!
If Facebook don’t intend to take down fake news then they are encouraging it, they claim that they remove or reduce the ability of page owners to generate income on Facebook if they consider fake news peddlers.
How does this affect Security
The issues occur when those who truly believe the fake news start to proportion it. Often going viral fake news around security concerns on social media, applications and or websites can cause serious damage to the reputation of those targeted.
It’s one thing to allow and encourage free speech, but when it starts to affect authentic business those at the centre of the problem need to be brought to book. InfoWars has in the past advertised its site and already some its fake news via YouTube advertising. When those adverts are shown in the middle of an item from a highly reputable company it has the effect of subliminally detracting form the reputation of these firms.
Some of the biggest brands in the U.S. had ads running on the YouTube channels for far-right website InfoWars and its founder, notorious conspiracy theorist Alex Jones, and they say they had no idea YouTube was allowing their advertising to appear there. – CNN
And on the subject of Fake News, lets look at the person who coined the phrase:
President Trump refused a question from CNN’s Jim Acosta at a joint press conference Friday afternoon with UK chief Minister Theresa May in Buckinghamshire. Earlier in the press conference, Trump attacked CNN after receiving a question from the NBC News reporter Hallie Jackson. Trump said NBC is “possibly worse than CNN.”
“Mr. President, since you attacked CNN, can I ask you a question?” Acosta asked Trump.
FOX News correspondent John Roberts “Go ahead” he said.
“Can I ask you a question?” Jim Acosta persisted.
“No,” Trump told him.
“CNN is fake news,” Trump said. “I don’t take questions from CNN. CNN is fake news. I don’t take questions from CNN.”
So in this case those accused of delivering fake news are not being given a chance to ask a question! If the press publishes a story that is not true then you have the opportunity to challenge them in a court of law, but POTUS doesn’t bother doing that, he instead delivers his own brand justice.
What is the verdict on security?
Honestly, this is damaging, the press in the United Kingdom have a duty to report honestly and fairly, failing to do so results in court action almost every time. Trump has accused the BBC of purveying fake news in the past, now I know that the BBC has been accused of being biased in the past, in some situations they have been found guilty and had to pay the price, however, they are funded by the UK public via a license fee and as such they are under scrutiny.
Whenever public opinion is manipulated there are risks to security, either cyber or actual. The current climate of calling anything that people don’t like as fake instead of bringing the culprits to book needs to change in the real world and the cyber ecosystem.
As a consequence the lies continue to be spread and world security and cyber security are where the experiencing starts.
Facebook has recently been attempting damage limitation after the Cambridge Analytica scandle. UK advertising has been complete of how Facebook is dropping its 3rd party data partnerships, in fact there is probably a second reason for this. GDPR would make 3rd party data partnerships like the Cambridge Analytica one a minefield for Facebook.
The amount of compliance that would be required, the documentation, checking and verification not to mention the fines if something went wrong would be enormous.
Sure, Facebook only received a £500,000 fine for the recent scandal, this is likely to be because the incident happened before GDPR came into force, future breaches would be dealt with by much larger fines.
What can be done?
It seems that unless an affected party takes the offending party to court, the answer may be not a lot. Or is it?
The lesson to be learnt here is that according to Facebook, they won’t take fake news down already after they have found it. The public are consequently in the position of strength.
Don’t believe everything you read. You can use websites like https://www.snopes.com/ who provide a lot of resources about scams and news. You can also check the facts at https://fullfact.org/ to check the validity of a story.
If you find that the story is fake, then make sure you point it out politely to the person(s) promoting it.
Why is this so important? Well, there is a very successful ploy that the bad guys often use, simply put they look for popular news trends, create pages that promote that news or hijack existing pages and embed their own malicious code in the page. Before you know it malware has spread across the internet infecting thousands or millions of computers.
In summary, fake news causes real cyber security problems and can be much more dangerous in the real world.