Ben Werdmuller

Yesterday I sent a memo to all staff advising them on the situation at Twitter and how it pertains to their own security. I thought it might be useful to share a version of this information with you, too.

Twitter’s Chief Information Security Officer, Chief Privacy Officer, and Chief Compliance Officer all quit on Wednesday night. One can reasonably infer that the team at Twitter is being asked to do things that these people were not comfortable with, and given their roles, it’s reasonable to consider Twitter to be insecure going forward.

At the same time, it’s still where a lot of people find community and reach. You might not want to leave it right now. Here, then, are some suggestions about how to stay safe while remaining on the platform.

Enable non-phone two-factor authentication. Twitter allows you to log in with two-factor auth. Using your phone number leaves you open to having that number leaked - or used for other purposes by the company - in the future. I always recommend using an authentication app. Authy is a good stand-alone app, but this functionality is also built into password managers like 1Password.

Remove your credit card number. If you’ve bought ads, remove your payment details from the system. We know that credit card numbers are stored insecurely on the platform.

Remove sensitive DMs. DMs on Twitter are not encrypted. They could be leaked or mined by the company for other purposes.

Use a password manager to generate your password. Don't try and use a password you've invented yourself. And don't share this password with any other system: it’s just for Twitter.

Use a canary email address, if you can. All Google-powered email addresses can have arbitrary labels added to them using a +. For example, the address ben+twitter@werd.io will still get to me - but if I use that label on my email address in my Twitter account, I'll know my account has been compromised when other entities start using it.

Post via the web or using a third-party app. We know that Twitter tracks very detailed location information from its app users. Web browsers keep you safe, so posting via the web does not carry the same risk.

Two service updates I’m interested in:

Substack has introduced a “bestseller” badge for its top-selling newsletters, as a sign of quality. Newsletters on Substack don’t need to have paid tiers, but this badge is only given out to newsletters that have a lot of paid subscribers. The implication is that non-paid newsletters will experience FOMO - and potentially a drop in new subscribers because they don’t have the badge - and try to climb the ladder. It’s the first time that Substack, to my knowledge, has tied quality visibly to revenue.

Twitter has started selling its blue “verified” badge for $8 a month, replacing the previous system that gave badges to notable individuals in order to protect them from impersonation and abuse. Twitter will also demote tweets from non-verified users, treating them like “email spam”, effectively meaning that you’ll need to pay a minimum of $96 a year to get reach on the platform. Again, this ties revenue to quality: the only people worth being heard, according to Twitter’s new leadership, are people with money. Notably, the feature is only available on iOS in the “US, Canada, Australia, New Zealand, and the UK”, which fundamentally limits the global inclusivity, and therefore the value, of the platform. It’s an odd choice. Based on precedent from Musk, I expect it to be partially rolled-back on a whim, but it’s here for now.

The danger with both plans is that only people with money can be heard. A Substack newsletter by someone with no existing following is unlikely to make it into the bestsellers list; therefore, people who already have privilege and power will find it cemented by the platform. And while $96 might not seem like a lot of money from an upper middle class American perspective, for most people in the world it’s an unjustifiable cost. Without mitigations, we’re likely to find ourselves in a world where voices from vulnerable populations remain underheard or even suppressed.

That’s clearly a problem from an equity and inclusion standpoint - and therefore also in terms of reader experience. The narrower the context and demographics of the people who produce most visible content are, the more homogenous it becomes, and therefore the more boring. We all gain a lot by being exposed to people from contexts and backgrounds different to our own. Not only is building a platform that elevates diversity the right thing to do ethically, it builds a healthier community with more interesting conversations. It’s better all the way around.

I think we’ll see the two platforms diverge in their approaches. Substack will quickly figure out that it needs to elevate different voices to continue to grow: audience diversification is key to it. Twitter, meanwhile, will probably not figure this out in a way that it can act on, not because there isn’t a way for it to be acted on, but because it seems to have lost all semblance of acting on a coherent strategy or mindset under Musk. Substack has some real editorial ethics problems to contend with, but it seems to be adept at the fundamentals of community growth.

I also want to call out that Medium under Tony Stubblebine is figuring out these problems in a very thoughtful and transparent way. As Tony points out in the last link, the quality bar is not up for debate; the question is, who’s in consideration to find an audience to begin with.

Alright, America. All eyes are on us.

There’s a lot of propaganda out there asking us not to vote. “It doesn’t make a difference,” they’ll say. Or: “the lines are really long.” Or they’ll talk down the whole process, as if democracy isn’t cool, or participating in it is some kind of affront to a higher cause. Or they’ll suggest - wrongly and maliciously - that the whole thing is rigged.

Bullshit. Vote. This is the bare minimum table stakes for living in a democracy. Picking our elected representatives matters. Voting on ballot initiatives matters. This is the way we get to have a say.

There are a lot of politicians who think not every eligible citizen should vote. Paul Weyrich, a conservative political activist, memorably said in a speech:

"I don't want everybody to vote. […] As a matter of fact, our leverage in the elections quite candidly goes up as the voting populace goes down."

More recently, poll workers have left their positions after threats and harrasment. And the Brennan Center for Justice reports that “at least seven states enacted 10 laws that make voting more difficult — of these, 5 laws in five states are in place for the midterms. […] Since the beginning of 2021, lawmakers have passed at least 42 restrictive voting laws in 21 states.”.

Meanwhile, the neoreactionary movement, which wants to replace American elected government with a CEO-like monarchy, has found deep pockets in billionaire former Facebook board-member Peter Thiel and at least two Senatorial candidates.

For better or worse, America has an outsized influence on the world. Our votes help shape not just our communities, but communities everywhere. The representatives we pick shape our local culture and global economies; they can be the difference between war and peace, collaboration and colonization, poverty and living well. It’s not an idea to take lightly.

Democracy is precious. Our voices matter. We’ve been given a Constitutional right, and we need to use it. As a citizen, you have the right to use it. Today is the day.

If you need help, here’s how.

Photo by Element5 Digital on Unsplash

I’m the CTO for The 19th, a women-led newsroom reporting on politics and policy with a gender lens. I’m super-proud to be here: it’s the most empathetic team I’ve ever worked on, and the journalism it produces is vital in the current moment.

There are a few ways you can keep on top of it:

The daily newsletter is produced by Annelise McGough. It’s intelligent, concise, and will make you smarter.

There’s also a weekly newsletter, which contains a weekly column and a deeper dive. The two newsletters are complementary.

There’s an RSS feed, of course! The 19th produces a handful of high-quality stories every day that won’t overwhelm your feed.

I was a subscriber long before I worked here, and I applied because I love the journalism. I say this as a fan more than a staff member: you should check it out.

A while back I wrote a single-page site, Get Blogging, that’s designed to be a guide to which blogging platform to pick. It doesn’t actually tell you how to blog - and perhaps inevitably, I’ve started receiving lots of emails asking how to do just that.

There isn’t really a one-size-fits-all answer to this question, but here’s how I’ve answered it in the past:

A blog post is not the same as an essay or article. It’s simply an update to the log of information you’re writing on your website. That stream of posts, together, makes up your blog. So a post can be as short or as long as you like. It’s your voice, so they can also be as formal or informal as you like. I use a pretty informal voice in my blogging because that’s what comes naturally to me. You don’t need to do the same thing as me, or as anyone else.

Some examples:

• Simon Willison writes notes about things he’s learned alongside his regular blog. Simon has also written a post advising what to blog about - things you’ve learned and things you’ve made - so definitely check that out too.
• Matt Haughie posts shorter notes and updates about everything he’s interested in.
• Winnie Lim sits down every week to write a longer piece about her life.
• Maya writes a variety of notes on a page that just gets longer and longer.
• Everlasting Blort uh, just is.

Eventually, it becomes second nature: jot down some thoughts and hit publish. Until then, think of it like starting a running habit. The first few days you run, it’s awful and you think it’ll never feel any better. But after a few weeks, you start getting antsy if you don’t run. If you’re not used to writing, it can feel like a slog, but it’s worth getting over that hump.

I once gave someone the advice to write something interesting to them on their blog every weekday for a month - and then to comment on someone else’s blog. Those comments are important: blogs are a community spread across thousands of sites, and it’s a good idea to join in and add value where you can. Don’t comment to self-promote; comment to share and uplift.

And then how do you gain an audience? First: don’t think of it as an audience. It’s a community, and you’re joining it, not gaining it.

There are plenty of sites out there that purport to tell you how to get 100,000 readers and a bunch of money really quickly. They’re all grifters, trying to (you’ve guessed it) gain a ton of readers and a bunch of money really quickly. You can try and hustle people out of cash, but I’d argue that this isn’t really blogging. Blogging is putting your earnest self on the page, one way or another, so that other people who feel or think the same way can find and connect with you.

To build an enduring community of readers you need to be authentically yourself, post about what you’re really interested in, share regularly, interact with other peoples’ blogs, and more than anything, keep it up. Good luck.