Technology & Surveillance Theories

The claim that Bitcoin was secretly built by the NSA (or another intelligence agency) as a surveillance tool, honeypot, or stepping stone to a controllable cashless currency. Proponents point to two real facts: the NSA designed the SHA-256 hash function Bitcoin uses, and NSA cryptographers co-authored a 1996 paper on anonymous electronic cash. But no evidence connects the agency to Bitcoin's creation, the technology it uses is public and standardized, and the code and history point to an independent cypherpunk lineage.

Facebook discovered in December 2015 that Aleksandr Kogan's 'thisisyourdigitallife' app had harvested data from approximately 87 million users and transferred it to SCL Group/Cambridge Analytica. Facebook contacted Cambridge Analytica, obtained certifications of data deletion, and did not notify affected users. Internal documents produced in the 2018 FTC investigation showed Facebook had identified the policy enforcement gap but treated it as resolved by the deletion certifications. Christopher Wylie's whistleblower disclosures to the New York Times and The Guardian (17 March 2018) revealed that the data had not been deleted. Facebook paid a $5 billion FTC settlement (24 July 2019) and a $100 million SEC fine. The claim that Facebook knowingly concealed this data harvest from regulators and users is partially supported by the documentary record.

Section 230(c)(1) of the Communications Decency Act 1996 provides that no provider or user of an interactive computer service shall be treated as the publisher or speaker of any information provided by another information content provider. Drafted by Reps. Christopher Cox and Ron Wyden as a response to Stratton Oakmont v Prodigy (1995), it has since shielded Meta, Google, and X from liability for user-generated content. Critics — from the Knight First Amendment Institute to House Energy and Commerce Committee — argue the immunity is overbroad and enables platform censorship; defenders counter that removing it would chill free expression and destroy small platforms. Trump EO 13925 (28 May 2020) directed a review; it was revoked 21 January 2021. The Supreme Court dismissed federal-government censorship-collusion claims in Murthy v Missouri (26 June 2024) for lack of standing. The 'conspiracy' framing here is the claim that Big Tech lobbied to entrench and expand Section 230 to achieve permanent, unaccountable censorship power.

The claim that artificial intelligence poses an existential or catastrophic risk to humanity has been advanced by Nick Bostrom ('Superintelligence,' 2014), Stuart Russell ('Human Compatible,' 2019), Eliezer Yudkowsky and the LessWrong rationalist community, and — in more measured form — by Geoffrey Hinton and Yoshua Bengio. The Future of Life Institute open letter (22 March 2023) calling for a six-month pause on large AI experiments attracted over 30,000 signatories. The Center for AI Safety statement (30 May 2023) was signed by Hinton, Bengio, Sam Altman, and Demis Hassabis. The AI Safety Summit at Bletchley Park (1-2 November 2023) convened 28 countries plus the EU. Counter-arguments from Andrew Ng, Yann LeCun, and Melanie Mitchell hold that existential framing overstates near-term risk and distracts from concrete algorithmic harms including bias and labour displacement.

Between 2014 and 2023 a dense funding and personnel network linked Effective Altruism organisations (Open Philanthropy, Centre for Effective Altruism, 80,000 Hours, Future of Humanity Institute), AI-safety nonprofits (MIRI, Lightcone Infrastructure), and the leading AI labs (OpenAI, Anthropic). FTX founder Sam Bankman-Fried channelled hundreds of millions through the FTX Future Fund before FTX collapsed in November 2022. SBF also made large US political donations. Helen Toner's 2023 departure from the OpenAI board was partly tied to tensions over EA-aligned messaging. The network was real and well-documented; the conspiracy framing centres on whether it constituted coordinated ideological capture of AI governance.

On 17 September 2024, approximately 5,000 pagers used by Hezbollah operatives across Lebanon and Syria detonated simultaneously, killing 12 people and injuring thousands. The following day, 18 September, ICOM IC-V82 walkie-talkies exploded, killing 20+ more. Total casualties: at least 42 killed, 3,500+ injured. Reuters and Washington Post reporting described a supply-chain compromise via shell companies BAC Consulting (Hungary) and Norta Global (Bulgaria). Israeli Prime Minister Netanyahu confirmed Israeli responsibility in a declassification announced in August 2025. The UN OHCHR opened an investigation into compliance with international humanitarian law.

On 11 March 2025, National Security Advisor Mike Waltz accidentally added The Atlantic editor Jeffrey Goldberg to a Signal group chat called 'Houthi PC small group' that included Defense Secretary Pete Hegseth, VP JD Vance, Secretary of State Marco Rubio, DNI Tulsi Gabbard, senior adviser Stephen Miller, envoy Steve Witkoff, and others. The group discussed and coordinated US military strikes on Yemen. Goldberg published his account on 24 March 2025 with some details redacted; Hegseth had shared specific weapons and strike timings approximately two hours before attacks occurred. Congressional hearings followed. Waltz was subsequently reassigned to serve as US Ambassador to the United Nations.

Avid Life Media's extramarital-affair dating site Ashley Madison was breached by a hacker group calling itself the 'Impact Team,' which exfiltrated more than 32 million user records and 25GB+ of data. The Impact Team issued a first leak on 19 July 2015 and released the full dump on 18 August 2015 via BitTorrent and Tor. The data included names, email addresses, home addresses, sexual preferences, and partial payment details. At least two suicides were documented in direct connection with the exposure — a Texas pastor and a San Antonio police captain. Avid Life Media CEO Noel Biderman resigned on 28 August 2015. The FTC and state attorneys general reached a $11.2 million civil settlement and a $1.66 million fine in July 2016. Subsequent analysis found approximately 95% of female profiles were bots, and legacy systems had stored passwords in plaintext.

Silk Road was a Tor Hidden Service darknet marketplace launched in February 2011 by Ross Ulbricht, operating under the pseudonym 'Dread Pirate Roberts.' By October 2013 it had facilitated approximately $1.2 billion in Bitcoin-denominated transactions, primarily drug sales. FBI agent Christopher Tarbell arrested Ulbricht on 1 October 2013 at a San Francisco public library after Ulbricht left his laptop logged in. Ulbricht was convicted on 4 February 2015 in the Southern District of New York on seven counts including money laundering conspiracy and drug-trafficking conspiracy, and sentenced to life without parole on 29 May 2015. Two federal agents — DEA's Carl Force IV and USSS's Shaun Bridges — were convicted of embezzling over $1.1 million in Bitcoin during the investigation. President Trump commuted Ulbricht's sentence on 21 January 2025.

Internal Google project codenamed Dragonfly was built to create a China-compliant censored search engine that would blacklist politically sensitive queries and link search activity to users' phone numbers. The Intercept reporter Ryan Gallagher disclosed the project on 1 August 2018 based on leaked internal documents. More than 1,400 Google employees signed an open letter demanding transparency. Google CEO Sundar Pichai testified before the House Judiciary Committee on 11 December 2018, declining to confirm Dragonfly was dead. Google VP Karan Bhatia told the Senate on 16 July 2019 the project had been 'terminated.' Two employees — Jack Poulson and Liz Fong-Jones — resigned in protest. The project was real, internally documented, and the subject of government testimony. The core claim is confirmed.

On 27 June 2017 a destructive malware campaign — publicly branded NotPetya — erupted from Ukraine and spread globally within hours, masquerading as ransomware while in reality being a pure wiper designed to maximise damage. US CISA, UK NCSC, and Five Eyes partners attributed the attack to Russian GRU Unit 74455 (Sandworm) in February 2018; the US DOJ indicted six GRU officers in October 2020. The supply-chain entry point was a trojanised update to M.E.Doc, a Ukrainian accounting software package used by roughly 80 percent of Ukrainian businesses. Global losses exceeded $10 billion, making it the costliest cyberattack in recorded history.

On 23 December 2015, cyberattackers disrupted electricity supply to approximately 230,000 customers in Ukraine's Ivano-Frankivsk Oblast for one to six hours — the first publicly confirmed successful cyberattack on civilian power grid infrastructure anywhere in the world. US-CERT (IR-ALERT-H-16-056-01), the Ukrainian SBU, and security researchers attributed the attack to Sandworm (GRU Unit 74455), who used spear-phishing to compromise three Ukrainian regional electricity distribution companies, deployed the BlackEnergy malware and KillDisk wiper, and launched a telephony denial-of-service to hamper restoration. A follow-on attack on 17 December 2016 (Industroyer/Crash Override) struck the Kiev transmission substation.

Between August 2016 and April 2017, an anonymous group calling itself the Shadow Brokers released a series of files containing what appeared to be NSA Equation Group/Tailored Access Operations (TAO) cyberweapons, including the EternalBlue, EternalRomance, EternalSynergy, and DoublePulsar exploits. Microsoft patched the primary vulnerability (MS17-010) on 14 March 2017 after a pre-disclosure from the NSA; within two months the exploits were weaponised in WannaCry (May 2017) and NotPetya (June 2017). The identity and affiliation of the Shadow Brokers has never been definitively established; leading theories include Russian intelligence theft, an NSA insider, or both.

The Equifax breach exposed the personally identifiable information of 147.9 million Americans — Social Security numbers, dates of birth, addresses, and driver's licence numbers — via an unpatched Apache Struts vulnerability (CVE-2017-5638). The patch was available on 8 March 2017; the breach began on 13 May 2017 and was discovered internally on 29 July 2017. Equifax did not disclose publicly until 7 September 2017. In the interim, the company's CFO and three other executives sold approximately $1.8 million in stock. Two officers — Jun Ying and Sudhakar Bonthu — were later charged with insider trading. CEO Richard Smith resigned on 26 September 2017. The $700 million FTC and state AG settlement in July 2019 remains one of the largest data-breach settlements in US history.

The Marriott Starwood breach exposed approximately 339 million guest records — including passport numbers, encrypted payment card details, and travel history — from a database that had been compromised since 2014. Marriott acquired Starwood Hotels in September 2016 without discovering the intrusion, which continued for more than two years post-acquisition. The breach was disclosed on 30 November 2018. US and UK intelligence attributed the attack to APT10, a hacking group linked to China's Ministry of State Security, based on tools and techniques. The UK's ICO issued an initial GDPR fine of £99.2 million in July 2019, subsequently reduced to £18.4 million in October 2020. Seven million UK records were affected.

Between 27 November and 18 December 2013, attackers stole 40 million payment-card numbers and 70 million records of personal information from Target's point-of-sale systems. Entry was gained via stolen credentials belonging to Fazio Mechanical Services, an HVAC vendor with network access. BlackPOS RAM-scraping malware was installed on Target's POS terminals. Journalist Brian Krebs first disclosed the breach publicly on 18 December 2013, the same day Target confirmed it. CEO Gregg Steinhafel resigned on 5 May 2014; CIO Beth Jacob resigned in March 2014. Target reached an $18.5 million settlement with state AGs in May 2017. Total costs exceeded $300 million.

On 21 June 2013, The Guardian published reporting by Ewen MacAskill, Julian Borger, and Nick Hopkins revealing TEMPORA — a GCHQ program operating from the Bude facility in Cornwall that tapped more than 200 transatlantic fiber-optic cables and buffered up to 21 petabytes of data per day on a rolling 3-day storage window. Related programs included INCENSER, MUSCULAR (shared with NSA), and CARBOY. The Investigatory Powers Act 2016 codified UK bulk collection powers. The European Court of Human Rights ruled in Big Brother Watch v UK (2018, 2021) that some UK interception practices violated ECHR Article 8. Confirmed.

On 6 June 2013, the Washington Post (Barton Gellman) and The Guardian (Glenn Greenwald) simultaneously published NSA PowerPoint slides leaked by contractor Edward Snowden revealing PRISM — a Section 702 Foreign Intelligence Surveillance Act program that compelled direct upstream data collection from Google, Facebook, Yahoo, Microsoft, Apple, AOL, Skype, YouTube, and PalTalk. NSA Director Keith Alexander testified to Congress. The Privacy and Civil Liberties Oversight Board (PCLOB) issued a detailed 2014 report confirming the program's scope. Companies denied 'direct access' but acknowledged compliance with court orders. The program is confirmed.

AT&T technician Mark Klein revealed in 2006 that a secret room on the 7th floor of AT&T's 611 Folsom Street facility in San Francisco had been equipped with a Narus STA 6400 deep-packet inspection system fed by a fiber-optic splitter. Klein's sworn declarations in EFF v. AT&T (Hepting) showed AT&T had allowed the NSA to tap internet backbone traffic without warrants. The New York Times had disclosed the broader warrantless wiretap program in December 2005. The FISA Amendments Act of 2008 granted retroactive immunity to telecoms. The room and the surveillance program are confirmed.

Internal Microsoft strategy memoranda leaked in autumn 1998 — later known as the Halloween Documents — described Open Source Software and Linux as serious competitive threats and discussed tactics for neutralising them, including protocol pollution. The first document, authored by engineer Vinod Valloppillil and dated 1 August 1998, was leaked to open-source advocate Eric S. Raymond, who published annotated versions publicly. A second document followed. The memos gave currency to the phrase "embrace, extend, extinguish" (EEE), attributed to a Microsoft VP Paul Maritz internal email. The documents' authenticity was confirmed by Microsoft. They featured in EU antitrust proceedings and in Comes v. Microsoft (Iowa, 2007).

The CIA and West German BND covertly co-owned Swiss cipher-machine manufacturer Crypto AG from 1970, selling rigged encryption hardware to approximately 120 governments and militaries worldwide. For decades the agencies read the encrypted traffic of foreign governments while those governments believed their communications were secure. A joint WaPo/ZDF/SRF investigation published 11 February 2020 — drawing on a classified internal CIA history called the Minerva Files — confirmed the operation. The BND exited in 1993 citing compromise risk; the CIA continued as sole owner until 2018. The operation is assessed as confirmed by primary documentation.

On 24 November 2014 a group calling itself the 'Guardians of Peace' launched a wiper attack against Sony Pictures Entertainment, destroying approximately 70% of the company's corporate data. Around 100 terabytes of internal data were exfiltrated prior to the wipe, including executive emails, employee salary data, personal information, and unreleased films. The attack was linked to Sony's forthcoming comedy 'The Interview', which satirised North Korean leader Kim Jong Un. The FBI attributed the attack to North Korea on 19 December 2014. A 2018 DOJ indictment named Park Jin Hyok, a member of North Korea's Lazarus Group (Unit 180), for the Sony attack and also for WannaCry and the Bangladesh Bank heist.

Russian SVR foreign intelligence (APT29 / Cozy Bear / Nobelium) compromised the build pipeline of SolarWinds' Orion IT-monitoring platform in late 2019, inserting a trojanized DLL (SUNBURST) into a signed software update distributed to approximately 18,000 customers. Of those, roughly 100 high-value targets were enumerated for deeper intrusion, including nine US federal agencies — Treasury, Commerce, State, DHS, and others — as well as Microsoft, FireEye, and Mimecast. FireEye disclosed the attack on 8 December 2020 after discovering its own breach. CISA issued Emergency Directive 21-01 on 13 December 2020. The operation is one of the most significant intelligence-gathering cyber-intrusions ever documented against the United States government.

Stuxnet was a joint US-Israeli cyber-weapon — developed under the codename Operation Olympic Games — designed to sabotage Iran's uranium enrichment programme at the Natanz facility by targeting Siemens S7-315 and S7-417 programmable logic controllers (PLCs) governing IR-1 centrifuges. Discovered in the wild in June 2010 by Belarusian security firm VirusBlokAda and subsequently analysed in detail by Symantec and German researcher Ralph Langner, Stuxnet exploited four zero-day vulnerabilities. The New York Times' David Sanger confirmed the US-Israeli authorship in a 2012 report based on US official sources. Approximately 1,000 IR-1 centrifuges are estimated to have been physically destroyed by the worm. It is the first publicly known nation-state cyber-weapon designed to cause physical-world destruction.