Today's links

• Adversarial interoperability is a team sport: Vibe-coded jailbreaks are fun, but don't solve the problem.
• Hey look at this: Delights to delectate.
• Object permanence: Labour Whip's pro-Iraq war threats; LoC's emulators; Kevin Mitnick plays CIA stooge; ICE: "The warrant is coming out of my balls"; WIPO's secret trademark meeting; Linking isn't libel (in Canada); Make: singing busts; Tory minister kills Turing's Law; Trump hotels rebrand as "Scion".
• Upcoming appearances: Vancouver, Ottawa, Vienna, Kilkenny, Courtenay, Vancouver, Oxford, Sheffield, Virtual, Oxford, Montreal.
• Recent appearances: Where I've been.
• Latest books: You keep readin' em, I'll keep writin' 'em.
• Upcoming books: Like I said, I'll keep writin' 'em.
• Colophon: All the rest.

---

Adversarial interoperability is a team sport (permalink)

Enshittification is particularly galling because (in theory, at least), digital technology should be really hard to enshittify.

That's because the only digital computer we know how to build is the "Turing-complete, universal von Neumann machine," which is to say, a calculating engine capable of computing every valid program. In some deep, important, foundational sense, every computer is the same as every other computer. Sure, they vary in terms of speed, storage and RAM, but given enough time and electricity, every computer can run every program.

This has profound implications for enshittification. Say a tech boss takes away a feature you value (as when Sonos pushed an update that removed nearly all the functionality from its "smart" speakers), or adds a feature you hate (like when Chamberlain blocked third-party apps from controlling its garage doors so it could force its customers to view seven ads before they could open or close their garages). At that point, a programmer can write an "interoperable" program that restores the good feature or blocks the bad one.

This program can be costlessly and instantaneously distributed to every affected technology user, and those users will likely pay something for it. After all, enshittification is a way to shift value away from technology users to tech companies, which makes the case for you paying for disenshittification technology that wrestles that value back.

All of that means that, in a state of nature, companies that are contemplating enshittification need to worry that their greed will tempt new companies to enter the market and poach their customers and suppliers. This alone might be enough to frighten companies off from enshittificatory gambits, and if companies press ahead regardless, then they open market opportunities for better companies that can costlessly, instantaneously usurp the original manufacturer's relationship with their entire affected customer base.

That's how it should work. But in 1998, Bill Clinton signed the Digital Millennium Copyright Act, and Section 1201 of the DMCA establishes a felony (punishable by a five-year prison sentence and a $500,000 fine) for reverse-engineering and modifying technology without the manufacturer's permission. Then, the US Trade Rep spent the next 25 years making sure that every US trading partner had an identical (or even worse!) "anticircumvention" law:

https://pluralistic.net/2025/05/26/babyish-radical-extremists/#cancon

The result is a grotesquely asymmetrical digital world, in which companies are free to use the flexibility of digital computers to downgrade or brick your digital devices, but where you commit a crime if you avail yourself of a countermeasure to get more out of something you own. This is the core technological factor at play in enshittification.

Enter AI. Thanks to vibe-coding, everyday people are rolling their own software for their devices and building the tools to shatter the digital locks that manufacturers use to block disenshittification. An excellent article by 404 Media's Jason Koebler runs down some of these hacks, including drop-in replacements for smart TV software that blocks the endless ads and surveillance that have made TVs all but unusable:

https://www.404media.co/reverse-engineer-anything-is-the-new-wild-west-of-ai/

These AI tools mix several techniques to disenshittify users' devices. One major component is automating the installation of existing alternative firmware for these devices that have been (possibly illegally) created by hobbyists and uploaded to various code repositories. Installing these alternative OSes is typically a gnarly task, requiring the user to do a lot of complex, fiddly, highly technical work to bypass their devices' digital locks.

In a world without anticircumvention law, a company that sold alternative OSes could hire a ton of programmers and UX developers to smooth over this process, but this is beyond the reach of a typical hobbyist or even a community of hobbyists, especially if they must operate in the shadows, under the threat of civil and criminal liability.

There's a useful analogy here to the trajectory of desktop versions of GNU/Linux. The first time I tried to install Linux (on an original iMac, in the late 1990s), the installation process included a multi-week post-installation wrangle that saw me (often unsuccessfully) compiling key modules from source code and then painstakingly configuring them to get the computer's graphics and I/O working reliably.

Fast forward 30+ years and installing Linux is trivial, thanks to highly capitalized companies like Canonical (makers of Ubuntu, the flavor of Linux I've used for nearly 20 years now). Installing Ubuntu today merely requires that you download the OS to a thumbdrive, reboot your computer using the drive as a startup disk, and click "install." Canonical's installer automatically hunts down the correct software for your hardware and configures it. Canonical writes and contributes to a lot of parts of the Linux OS, but the most important work it does is the fiddly, painstaking, labor- and capital-intensive work of perfecting that installer so it Just Works.

Much of what a vibe-coded jailbreaking tool does is stand in for Canonical, but for hobbyist OSes for smart TVs and speakers and many other devices. These LLMs patiently research every weird error and peccadillo and parse through message boards and logfiles detailing other hobbyists' struggles to get the code working and methodically apply and adapt those solutions until your device Just Works.

Some of these vibe-coded interop tools go farther than that. According to Koebler's coverage, some device owners had their coding assistants scratch-build entirely new, heavily customized OSes for their devices, complete with bypasses that allow this new code to be installed despite the manufacturer's countermeasures which are designed to prevent this. Delightfully, many of these users have created software that revives their bricked, discontinued devices. This poses the possibility of a world in which manufacturers no longer have the last word in your use of your own property: the mere fact that the manufacturer lost interest in a device and killswitched it does not mean that you must consign that valuable device to a landfill to become immortal, toxic e-waste.

All of this is good news. Some of the most sophisticated jailbreaking tools (such as those on the super viral "Reverse Engineer Anything" Github page) run locally, on your own computer, without invoking the "frontier models" that the big, awful AI companies have created:

https://github.com/morluto/rea

This is good even if you're just modifying your own devices to get them to more closely conform to your own use-case. LLMs are genuinely good at coming up with the abstruse and obscure configuration lines and other incantations to get your technology working. Recently, I used a local model to fine-tune the power-management on my new laptop in ways that go beyond the options that are exposed through user-friendly graphic interfaces. The LLM spat out a grub "GRUB_CMDLINE_LINUX_DEFAULT" line that (again) Just Worked.

The last time I had to do this, I spent days painstakingly trouble-shooting options by trial-and-error. Using a chatbot to fill in the gaps left by decisions about which configuration options to place within reach of regular users and which to reserve for power-users has made my computer much more useful to me for the things I want to do, like writing and making collages.

The reality is that it's just not practical for technology developers to turn every conceivable function of your computer into a simple-to-use, accessible tool. A large part of technology design is about leaving things out (or, as my favorite Eno Oblique Strategy goes, "Be the first person to not do something that no one else has ever thought of not doing before"). No matter how thoughtful and diligent a technology designer is, they will never fully anticipate the needs and exigencies of their users. That's why the motto of the disability rights movement is "Nothing about us without us."

The users of technology know more about their use-cases than can ever be captured through a requirements gathering exercise and user testing. One of the best and proudest legacies of technology is the lineage of "user-friendly" programming tools that let nontechnical people design their own applications that exactly met their needs, from Hypercard to Visual Basic to Scratch, a lineage that vibe-coding tools are arguably part of:

https://pluralistic.net/2026/09/25/other-people/#right-there

But these tools are not perfect (nothing is). For all that Hypercard lets you do many things that would otherwise require a skilled programmer, it was also always limited relative to, say, writing MacOS code in Objective C. Your Hypercard program might do exactly what you needed it to, but slowly, and sometimes unreliably, and with serious limitations, such as a relatively low ceiling for the number of records you could add to a database.

Vibe-coded personal apps aren't necessarily subject to these limitations, but they come with some significant risks. Vibe-code can have serious security vulnerabilities that expose the user to things like identity theft or sextortion. It's conceivable that a vibe-coded garage-door opener app might make it possible for attackers to open your garage door when you're not home (or worse, when you are!). Depending on your risk-tolerance and expertise, these might be acceptable prices, or they might be too high.

But it's important to clearly identify the problem here: if the alternative OS you install on your smart TV exposes you to privacy-invading hack attacks, the problem is the defect in that software. The problem isn't that you had the temerity to rip out the manufacturer's own software and replace it with code of your choosing. You bought that TV, it's yours, and you don't owe the manufacturer an obligation to expose yourself to its own, built-in, intentional surveillance and invasive ads.

Here's a parallel: you have the right to put any shoelaces in your running shoes. Sure, Nike might prefer you to lace up your Jordans with its expensive OEM laces, but that's Nike's problem, not yours. Now, Nike might argue that by using no-name laces, you run the risk of having a lace break while you're running, which could also break your ankle. That's certainly a possibility: shoelaces do break, and Nike might be justifiably proud of the quality of its laces. But if your generic laces snap (and so does your ankle), the problem is that the shoelaces you chose were defective. The problem is not that you chose someone else's laces.

Your stuff is yours. You can put anyone's milk on your cereal, not just the milk that Kellogg's endorses. If the milk you choose is sour and you have to pour your cereal down the toilet, that's too bad, but it doesn't mean that Kellogg's should have the right to shame you for having the temerity to choose the milk you preferred, and it certainly doesn't militate for DMCA-style enforcement to coerce you into using Kellogg's official milk in the name of protecting you from food wastage.

I raise this because there's a live debate over this subject, which is well represented in the latest 404 Media podcast:

https://www.youtube.com/watch?v=UbG1qwxMtU0

In the podcast, Koebler and his 404 co-founder Joseph Cox express misgivings about various possible uses of "slop interop." Koebler discusses the fact that John Deere sells the same physical tractor at many different price-points, depending on which software a farmer chooses, and raises the possibility that a farmer might vibe-code software that replicates the high-end functionality without paying for it. Koebler discusses two possible downsides to this: first, that the vibe-coded software might be defective and expose the farmer to risk; and second, a question about whether it's fair or just for a farmer to get those additional functions of their tractor without paying for them.

I think the first objection is entirely legitimate. The software you run on your expensive tractor should be secure, both for your own benefit and for the security of our food supply. That's actually a pretty good reason to ditch John Deere's own software, which is very insecure:

https://pluralistic.net/2022/05/08/about-those-kill-switched-ukrainian-tractors/

But I think the second question – whether it's legit to get this functionality without paying John Deere for it – is spurious. Sure, if John Deere provides you with that functionality, then they can send you the bill for it. But if you provide yourself with that functionality, using software you procured independently of John Deere, then John Deere has no right to get paid for it, and they certainly shouldn't have the right to stop you.

That tractor is yours. The fact that John Deere manufactured it is irrelevant. If you pay a contractor to build a house for you and later on pay a different contractor to add another bathroom to it, you don't owe the first contractor anything. It's your house (and if that bathroom has a leaky toilet, that's a matter between you and the second contractor, and not a reason to force you to only use your original contractor).

The law defines a narrow slice of functions that manufacturers get to control: those ideas that a patent examiner deems "novel, useful and nonobvious." It's legit (and good) for commercial operators to copy and improve the ideas of their rivals and competitors. It's why skilled tradespeople cluster together in the same geographic area.

Take Clerkenwell, the neighborhood in London where precision machining was invented by the jewelers and machinists who clustered there during the Longitude rewards. The reason all those competitors sought such close promixity to one another was because they wanted to copy the new techniques their rivals were developing (even if that meant that their rivals would be able to copy them):

https://en.wikipedia.org/wiki/Longitude_rewards

If you're old enough to remember the advent of spreadsheets and the rollout of Visicalc, Lotus 1-2-3 and Excel, you'll know that every time a software vendor invented a new spreadsheet feature, all the other ones immediately copied it. This wasn't bad for spreadsheets: it was good for spreadsheets, just as copying your competitors was good for precision machining in Clerkenwell.

Everything from GNU/Linux (a feature-for-feature clone of AT&T Unix) to SAMBA (a plug-compatible clone of Microsoft's SMB) to iWork (file-compatible, feature compatible clones of MS Office's apps) came about through this "adversarial interoperability." What's more, the heyday of this kind of adversarial interop was also the heyday of disenshittification, the era in which any anti-feature installed by your existing vendor could be countered by a disenshittifying patch from a new one:

https://www.eff.org/deeplinks/2019/06/adversarial-interoperability-reviving-elegant-weapon-more-civilized-age-slay

The question of whether vibe-coded software is any good is separate from the question of whether it's good to replace the software in your devices, even if you replace it with software that has features that the manufacturer would normally charge a premium for. You are under no obligation to arrange your commercial affairs to the financial benefit of manufacturers, and anyone who claims to be surprised that someone they sold a device to used it to benefit themselves at the manufacturer's expenses is either disingenuous…or unserious. You bought it, it's yours.

But just as this vibe-coded adversarial interop has drawn both valid and spurious criticism, it's also drawn excitement that is partially justified and partially overblown.

When it comes to reviving bricked devices or rooting out the surveillance and ads from your smart TV, vibe-coded interop tools are genuinely exciting. These are the kinds of enshittification that can truly be remediated with individual jailbreaks.

But the real, meaty examples of enshittification can't be addressed on an individual level – they require systemic fixes. If you jailbreak your iPhone so that it can use alternative app stores, that fact is not sufficient to cause those alternative app stores to come into existence. If we want to stop Apple from levying a $100b "app tax" on the digital economy, it's not enough for individuals to vibe-code their own iPhone patches. We need to repeal the law that bans jailbreaking iPhones, so that a would-be alternative app store can raise capital and pay programmers and tech support staff and salespeople to assemble rival catalogs of software and help customers figure out how to get up their phones to use it.

The same goes for jailbreaking your printer so it accepts generic ink. Sure, this may work for you if you're up for refilling your own cartridges, and I'm sure that you can find someone on Alibaba who will sell you ink by the gallon. But the mere fact that a few users have secretly and privately jailbroken their inkjets won't conjure up a generic inkjet cartridge manufacturing sector. For that to happen, we need to make jailbreaking printers legal, not just possible.

Indeed, if we want to improve the quality of all that jailbreaking code the chatbots are writing and circulating, we need to be able to put those jailbreaks in public repositories for public inspection and public critique. It's possible for some of the code produced by an LLM to be slop, and for other code to be fine, and for yet a third tranche of code to be remediable slop that can be made robust and reliable through auditing and refactoring. You can't figure out which is which if you have to keep that vibe code a secret on pain of a long prison-sentence.

I think there's good cause to be excited at the prospect of getting your devices working better, or just working at all. I think that even if the code stops working after a while, that's still fine – either you got more use out of your device than you would have without the new code, or maybe you just make more code that runs for a while for you, and then you do it again.

These individual improvements to your devices and technology are worth celebrating. But they are no substitute for systemic intervention. If we're going to have a new, good internet, a post-American internet that truly disenshittifies America's defective tech exports and replaces them with robust, transparent digital public goods, we need to make reverse-engineering legal again. Once we fix our policy, then we can fix our code:

https://pluralistic.net/2026/01/01/39c3/#the-new-coalition

---

Hey look at this (permalink)

• Musk's Fake Flying Car And 'CEO Said A Thing!' Journalism https://karlbode.com/musks-fake-flying-car-and-ceo-said-a-thing-journalism/

• High schoolers, students: the twilight of macronism https://thomaspiketty.wordpress.com/2026/10/20/high-schoolers-students-the-twilight-of-macronism/

• The Singularity has been postponed https://johnquigginblog.substack.com/p/the-singularity-has-been-postponed-e77

• How to install an app on your Commodore 64 https://www.anildash.com/2026/10/08/install-an-app-commodore-64/

• A scammer could use what’s already exposed about you. https://www.malwarebytes.com/out-there

---

Object permanence (permalink)

#25yrsago Secret recording of Labour Whip demanding support for Iraq invasion https://www.theguardian.com/politics/2001/oct/22/uk.september11

#25yrsago LoC launches emulator-based digital file preservation https://web.archive.org/web/20011217002337/http://www.techreview.com/magazine/oct01/innovation5.asp

#25yrsago Kevin Mitnick to play CIA lackey https://web.archive.org/web/20011111105016/http://www.theregister.co.uk/content/55/22395.html

#15yrsago ACLU Tennessee brings suit against ICE officers who broke into house and said, “We don’t need a warrant, we’re ICE, the warrant is coming out of my balls.” https://web.archive.org/web/20111025092605/http://www.aclu.org/blog/immigrants-rights/we-dont-need-warrant-were-ice/

#15yrsago WIPO’s secret, corporate-run trademark enforcement meeting https://web.archive.org/web/20220121054715/https://craphound.com/PROGRAMManilaEdited10212011-FINAL.pdf

#15yrsago Canada’s Supreme Court: Linking isn’t libel https://web.archive.org/web/20111026134334/http://www.bbc.co.uk/news/world-us-canada-15374238

#15yrsago HOWTO recreate the Haunted Mansion’s singing busts https://www.youtube.com/watch?v=zRtiiMW47i4

#10yrsago Facebook’s crackdown on publishers feeds has sites paying celebs to repost https://digiday.com/media/facebook-thirsty-publishers-turn-celebrities-worm-news-feed/

#10yrsago Internet-destroying outages were caused by “amateurish” IoT malware https://krebsonsecurity.com/2016/10/hacked-cameras-dvrs-powered-todays-massive-internet-outage/

#10yrsago Tory minister’s filibuster kills Turing’s law and pardons for 65,000 persecuted gay men https://www.theguardian.com/law/2016/oct/21/chris-bryant-commons-plea-gay-pardon-law

#10yrsago Trump hotels, faced with massive declines in bookings, rebrand as “Scion Hotels” https://web.archive.org/web/20161023182616/http://www.travelandleisure.com/hotels-resorts/trump-scion-hotels

---

Upcoming appearances (permalink)

• Vancouver: Life After AI (Vancouver Writers Festival), Oct 22
  https://writersfest.bc.ca/festival-event-2026/46

• Ottawa: Life After AI (Ottawa Writers Festival), Oct 24
  https://writersfestival.org/event/life-after-ai

• Vienna: TED AI, Oct 28-30
  https://tedai-vienna.ted.com/

• Kilkenny (Kilkenomics), Nov 6-8
  https://kilkenomics.com/

• Courtenay: Enshittification (Sid Williams Theatre Society), Nov 10
  https://www.sidwilliamstheatre.com/events/cory-doctorow-talks-enshittification/

• Vancouver: BC Policy Solutions Gala, Nov 12
  https://bcpolicy.ca/gala/

• Oxford: Ministry of the Future, Nov 23
  https://ministryforthefuture.co.uk/events.html

• Sheffield: Reverse Centaur at Juno Books, Nov 25
  https://www.outsavvy.com/event/40274/cory-doctorow-in-conversation

• Virtual: Enshittification, AI, and the Future of Technology (UBC Master of Educational Technology), Nov 28
  https://met.ubc.ca/2026/09/met-speaker-series-cory-doctorow-enshittification-ai-and-the-future-of-technology/

• Oxford: Bennett Oxford Symposium on Open Code in Science, Dec 9
  https://www.bennett.ox.ac.uk/events/2026-bennett-institute-symposium/

• Montreal: World Science Fiction Convention, Sep 2-6
  https://montreal2027.ca/en

---

Recent appearances (permalink)

• Life After AI (Brain Bar)
  https://www.youtube.com/watch?v=IPPa43-n0vI

• Terms of Service with Clare Duffy (CNN)
  https://www.cnn.com/audio/podcasts/terms-of-service-with-clare-duffy/episodes/458ce968-af5d-11f0-b539-13ed2afe25f8

• AI, Work, and Power (Software Engineering Daily)
  AI, Work, and Power https://softwareengineeringdaily.com/podcasts/cory-doctorow-on-ai-work-and-power/

• AI, Corporate Power, and the Fight for Worker Control (Plutopia)
  https://plutopia.io/cory-doctorow-ai-corporate-power-and-the-fight-for-worker-control/

• How to Think About AI—Before It’s Too Late (Daniel Solove)
  https://www.youtube.com/watch?v=_0xR3uEgGcc

---

Latest books (permalink)

• "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026
  https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/

• "Canny Valley": A limited edition collection of the collages I create for Pluralistic, self-published, September 2025 https://pluralistic.net/2025/09/04/illustrious/#chairman-bruce

• "Enshittification: Why Everything Suddenly Got Worse and What to Do About It," Farrar, Straus, Giroux, October 7 2025
  https://us.macmillan.com/books/9780374619329/enshittification/

• "Picks and Shovels": a sequel to "Red Team Blues," about the heroic era of the PC, Tor Books (US), Head of Zeus (UK), February 2025 (https://us.macmillan.com/books/9781250865908/picksandshovels).

• "The Bezzle": a sequel to "Red Team Blues," about prison-tech and other grifts, Tor Books (US), Head of Zeus (UK), February 2024 (thebezzle.org).

• "The Lost Cause:" a solarpunk novel of hope in the climate emergency, Tor Books (US), Head of Zeus (UK), November 2023 (http://lost-cause.org).

• "The Internet Con": A nonfiction book about interoperability and Big Tech (Verso) September 2023 (http://seizethemeansofcomputation.org). Signed copies at Book Soup (https://www.booksoup.com/book/9781804291245).

• "Red Team Blues": "A grabby, compulsive thriller that will leave you knowing more about how the world works than you did before." Tor Books http://redteamblues.com.

• "Chokepoint Capitalism: How to Beat Big Tech, Tame Big Content, and Get Artists Paid, with Rebecca Giblin", on how to unrig the markets for creative labor, Beacon Press/Scribe 2022 https://chokepointcapitalism.com

---

Upcoming books (permalink)

• "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

• "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

• "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2027

• "The Memex Method," Farrar, Straus, Giroux, 2027

---

Colophon (permalink)

Today's top sources:

Currently writing:

• “Once Is Enemy Action,” a science fiction novel about the origins of modern technofascism. Today's words: 533 (27469 total).

• "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Fourth draft completed. Submitted to editor.

• A Little Brother short story about DIY insulin PLANNING

---

This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.

---

How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

Today's links

• The death of history's most successful publisher: Google has a scorching case of "main character syndrome."
• Hey look at this: Delights to delectate.
• Object permanence: Civil War x 4,400 ceramic cats; Okaysellers; Frankenstein hat; Clockwork Fagin; Tracking trackers; "Fever Beach."
• Upcoming appearances: Victoria, Vancouver, Ottawa, Vienna, Kilkenny, Couretnay, Vancouver, Oxford, Sheffield, Virtual, Oxford, Montreal.
• Recent appearances: Where I've been.
• Latest books: You keep readin' em, I'll keep writin' 'em.
• Upcoming books: Like I said, I'll keep writin' 'em.
• Colophon: All the rest.

---

The death of history's most successful publisher (permalink)

I published my first story in 1988, when I was 17 years old. Today, at 55, I've published more than 30 books, with three more coming in the next year or so. In the intervening years, I've spent a lot of time thinking and talking about publishing.

I've had plenty of opportunity to reflect on publishing: I've been a bookseller and worked in libraries, I wrote a column for Publishers Weekly, self-published a few books of my own, published the first-ever book licensed under Creative Commons, and broke several Kickstarter records for audiobook projects. But most of all, I've worked with publishing professionals: publicists, marketing directors, operations people, copyeditors, and, above all, editors.

My first novel editor was the magnificent Patrick Nielsen Hayden, who supported my publishing career from the very start, donating to help send me to the Clarion science fiction writers' workshop and inviting me to come read slush at Tor Books whenever I was in New York. Patrick didn't teach me everything I know about publishing, but he sure taught me a lot about publishing, and hardly a day goes by without my having cause to reflect on one of our many discussions over our decades-long professional and personal association.

Out of all the things I learned about publishing from Patrick, one truth stands out above all: publishing is "the act of making something public." Publishing may or may not involve editing, layout, printing, binding, marketing or other activities that we associate with publishing houses, but publishing always involves identifying a work, identifying an audience, and finding ways to connect that work to that audience.

This definition does a lot of useful work. For one thing, it locates publishing as part of the hard problem of human society, namely, "getting people to care about something that matters to you." Beyond publishing, this is the crux of politics, religion and commerce:

https://pluralistic.net/2021/07/04/self-publishing/

For another, this definition lets us understand that (for most of its existence) Google was the most successful publisher in human history. No other institution of any kind connected more works with more audiences. Lots of people have heard of Google's wildly unsuccessful motto "Don't be evil," but far fewer are familiar with Google's wildly successful mission statement, "organize the world's information and make it universally accessible and useful."

But all of that is in the past tense. With its AI projects – AI summaries, the Gemini chatbot – Google has abandoned the practice of "connecting works with audiences." Today, Google's function is to plunder all the works on the internet and chop them up and arrange them in an unimaginably vast, multidimensional array for the explicit purpose of preventing audiences from connecting with those works.

For most of its history, Google operated in a virtuous cycle with publishers whereby they allowed Google to crawl their sites and Google located audiences and connected them with the pages on those sites. Today, that cycle has turned vicious, with Google acting as a parasite that extracts value from the web's publishers and offers nothing in return.

This is entirely in keeping with the enshittification hypothesis: that once a platform is liberated from the disciplining forces of competition, regulation, labor and interoperability, it will squeeze its suppliers and users and harvest all the value for itself:

https://pluralistic.net/2023/01/21/potemkin-ai/#hey-guys

But AI represents a new phase in enshittification. Google has assayed enshittificatory gambits in the past, like deliberately worsening its search results in order to force you to search repeatedly, which gave the company more chances to show you ads:

https://pluralistic.net/2024/04/24/naming-names/#prabhakar-raghavan

But as sleazy as those gambits were, they were profitable. In some important sense, they were sustainable. Assuming Google could carry on indefinitely scamming its users in this way, they'd continue to bring in more cash than they spent, and continue to be the world's most successful publisher, connecting works and audiences (albeit in a deliberately degraded way).

Contrast this with AI, the money-losingest endeavor in the history of human civilization. Google is losing hundreds of billions of dollars on AI. The more AI Google does, the worse the company's financial footing becomes. If Google does this for long enough, it may cease to exist altogether. This collapse can only be prolonged by Google's ongoing extraction of value from web publishers, who no longer have their works connected with audiences via Google search results. Instead, Google usurps those audiences, shows them as many ads as it can, and still loses money in the bargain.

In Tim Wu's Age of Extraction, Wu lays out a thesis about how intermediaries – middlemen who perform a useful function connecting different groups, firms and individuals – are prone to developing "main character syndrome," abandoning their role as facilitators for others and abusing their position to make themselves the prime beneficiary of the transactions they facilitate:

https://www.penguinrandomhouse.com/books/691177/the-age-of-extraction-by-tim-wu/

Google has a scorching case of main character syndrome, and nowhere is that more obvious than in its AI-fueled transformation into web-scale parasite. The fact that this gambit might well destroy Google and the publishers the company once served – rather than merely enshittifying search with worse results and more ads – makes the whole thing look more like a Mafia bust-out than the enshittification of the first half of the 2020s:

https://en.wikipedia.org/wiki/Bust_Out

It's certainly an ignominious end for history's most successful publisher (as was).

---

Hey look at this (permalink)

• Trump says Google kisses his ass https://www.theverge.com/policy/1013485/trump-google-kiss-my-ass

• Tell Doug Ford: Say NO to Waymo https://techfordemocracy.ca/2026/04/29/say-no-to-waymo/

• Bizarre Blanets and Weird Worlds https://www.antipope.org/charlie/blog-static/2026/10/bizarre-blanets-and-other-weir.html

• The Showrunners Network https://www.kickstarter.com/projects/spacecommand/the-showrunners-network?ref=8rypb4

• Christian Conman Jim Bakker is Dead https://skepchick.org/2026/10/christian-conman-jim-bakker-is-dead/

---

Object permanence (permalink)

#25yrsago Reenacting the Civil War with 44,000 ceramic cats in handmade uniforms https://web.archive.org/web/20011021022729/http://www.phillyburbs.com/intelligencerrecord/news/news_intell/1332513.htm

#20yrsago More on publishing and “okaysellers” https://www.nielsenhayden.com/makinglight/bestsellers_oka/#008116

#15yrsago HOWTO make a Frankenstein hat https://web.archive.org/web/20111022194802/http://deliacreates.blogspot.com/2011/10/hey-frankie.html

#15yrsago Copyright policy in the UK: an evidence-free zone https://www.openrightsgroup.org/publications/cant-look-now-finding-film-online/

#15yrsago Clockwork Fagin on Escape Pod https://delivery-edge.libsyn.com/shows/18601/items/1737698/EP315_ClockworkFagin.mp3

#10yrsago At long last, America’s racist, crazy tough-on-crime prosecutors are losing elections https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2828803

#5yrsago Imperfections in your Bluetooth beacons allow for unstoppable tracking https://pluralistic.net/2021/10/21/sidechannels/#ble-eding

#1yrago Carl Hiaasen's 'Fever Beach' https://pluralistic.net/2025/10/21/florida-duh/#strokerz-for-liberty

---

Upcoming appearances (permalink)

• Victoria: Munro's Books, Oct 20
  https://www.munrobooks.com/events/6113620261020

• Vancouver: Life After AI (Vancouver Writers Festival), Oct 22
  https://writersfest.bc.ca/festival-event-2026/46

• Ottawa: Life After AI (Ottawa Writers Festival), Oct 24
  https://writersfestival.org/event/life-after-ai

• Vienna: TED AI, Oct 28-30
  https://tedai-vienna.ted.com/

• Kilkenny (Kilkenomics), Nov 6-8
  https://kilkenomics.com/

• Courtenay: Enshittification (Sid Williams Theatre Society), Nov 10
  https://www.sidwilliamstheatre.com/events/cory-doctorow-talks-enshittification/

• Vancouver: BC Policy Solutions Gala, Nov 12
  https://bcpolicy.ca/gala/

• Oxford: Ministry of the Future, Nov 23
  https://ministryforthefuture.co.uk/events.html

• Sheffield: Reverse Centaur at Juno Books, Nov 25
  https://www.outsavvy.com/event/40274/cory-doctorow-in-conversation

• Virtual: Enshittification, AI, and the Future of Technology (UBC Master of Educational Technology), Nov 28
  https://met.ubc.ca/2026/09/met-speaker-series-cory-doctorow-enshittification-ai-and-the-future-of-technology/

• Oxford: Bennett Oxford Symposium on Open Code in Science, Dec 9
  https://www.bennett.ox.ac.uk/events/2026-bennett-institute-symposium/

• Montreal: World Science Fiction Convention, Sep 2-6
  https://montreal2027.ca/en

---

Recent appearances (permalink)

• Life After AI (Brain Bar)
  https://www.youtube.com/watch?v=IPPa43-n0vI

• Terms of Service with Clare Duffy (CNN)
  https://www.cnn.com/audio/podcasts/terms-of-service-with-clare-duffy/episodes/458ce968-af5d-11f0-b539-13ed2afe25f8

• AI, Work, and Power (Software Engineering Daily)
  AI, Work, and Power https://softwareengineeringdaily.com/podcasts/cory-doctorow-on-ai-work-and-power/

• AI, Corporate Power, and the Fight for Worker Control (Plutopia)
  https://plutopia.io/cory-doctorow-ai-corporate-power-and-the-fight-for-worker-control/

• How to Think About AI—Before It’s Too Late (Daniel Solove)
  https://www.youtube.com/watch?v=_0xR3uEgGcc

---

Latest books (permalink)

• "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026
  https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/

• "Canny Valley": A limited edition collection of the collages I create for Pluralistic, self-published, September 2025 https://pluralistic.net/2025/09/04/illustrious/#chairman-bruce

• "Enshittification: Why Everything Suddenly Got Worse and What to Do About It," Farrar, Straus, Giroux, October 7 2025
  https://us.macmillan.com/books/9780374619329/enshittification/

• "Picks and Shovels": a sequel to "Red Team Blues," about the heroic era of the PC, Tor Books (US), Head of Zeus (UK), February 2025 (https://us.macmillan.com/books/9781250865908/picksandshovels).

• "The Bezzle": a sequel to "Red Team Blues," about prison-tech and other grifts, Tor Books (US), Head of Zeus (UK), February 2024 (thebezzle.org).

• "The Lost Cause:" a solarpunk novel of hope in the climate emergency, Tor Books (US), Head of Zeus (UK), November 2023 (http://lost-cause.org).

• "The Internet Con": A nonfiction book about interoperability and Big Tech (Verso) September 2023 (http://seizethemeansofcomputation.org). Signed copies at Book Soup (https://www.booksoup.com/book/9781804291245).

• "Red Team Blues": "A grabby, compulsive thriller that will leave you knowing more about how the world works than you did before." Tor Books http://redteamblues.com.

• "Chokepoint Capitalism: How to Beat Big Tech, Tame Big Content, and Get Artists Paid, with Rebecca Giblin", on how to unrig the markets for creative labor, Beacon Press/Scribe 2022 https://chokepointcapitalism.com

---

Upcoming books (permalink)

• "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

• "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

• "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2027

• "The Memex Method," Farrar, Straus, Giroux, 2027

---

Colophon (permalink)

Today's top sources:

Currently writing:

• “Once Is Enemy Action,” a science fiction novel about the origins of modern technofascism. Today's words: 514 (27116 total).

• "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Fourth draft completed. Submitted to editor.

• A Little Brother short story about DIY insulin PLANNING

---

This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.

---

How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

Today's links

• The technopolitics of ad-tech: Spying is good for tech, context is good for publishers.
• Hey look at this: Delights to delectate.
• Object permanence: PNH x Mike Ford; Singapore v Far East Economic Review; Publishing v bestsellers; Architecture v security; Vista v everyone; Free Bieber; Belarus sells the sugar bowls; OCCUPY GEORGE; Grey type sucks; Spinal Tap v studio math; Terry Pratchett x $10t coin; Boy Scouts x copyright maximialism; Canadian Tories x DRM; Herman Cain's 9-9-9 plan; ACLu v secret laws; Fined for suing the cops who shot you; Chicago PD steals millions for cop toys; Turing's Law; Copyleft v Vizio; Trump's killswitch.
• Upcoming appearances: Vancouver, Victoria, Ottawa, Vienna, Kilkenny, Oxford, Sheffield, Virtual, Oxford, Montreal.
• Recent appearances: Where I've been.
• Latest books: You keep readin' em, I'll keep writin' 'em.
• Upcoming books: Like I said, I'll keep writin' 'em.
• Colophon: All the rest.

---

The technopolitics of ad-tech (permalink)

"Technopolitics" are the politics embedded in technology. The Ur-text of technopolitics is "Do Artifacts Have Politics?" by the rock critic turned scholar Langdon Winner:

https://faculty.cc.gatech.edu/~beki/cs4001/Winner.pdf

With "Do Artifacts," Winner demands that we move beyond the idea of technologies having "intended consequences" and "unintended consequences" and towards a political economy of tech. In service to this, he divides the politics of artifacts into three categories:

I. Artifacts that have politics embedded in them by their creators, like Robert Moses's infamous bridges over the Long Island parkways. According to Moses biographer Robert Caro, Moses deliberately specified that these bridges must be too low for a city bus to pass under, in a bid to block Black people from traveling from New York City to the beaches he'd developed on Long Island.

Today those bridges are more than a century old, and they are still too low for city buses to pass under them, and this continues to mean that people who don't own private vehicles find it more difficult to get to the beach, and as it's still the case that race is a predictor of low incomes, those are still racist bridges.

II. Artifacts whose politics are accidental but unavoidable. Winner cites a kind of tomato harvester that vastly improved the efficiency of tomato pickers. These harvesters became very popular, which allowed tomato farmers to lay off large numbers of agricultural workers, and also allowed them to price the mechanically harvested tomatoes so cheaply that they crowded out other kinds of tomatoes.

Because these machines created a large pool of unemployed workers, they shifted power from labor to capital, and because these picking machines were too rough for all but the hardest varietals of tomato, they changed the flavor profile of tomatoes in America for the worse, towards a bland, tough tomato.

These picking machines were not designed to make workers poorer, nor were they designed to make tomatoes taste worse, but because of their technical characteristics, this was the unavoidable outcome, the inextricable politics of these machines.

III. Artifacts whose politics are intrinsic to their design. Here, Winner contrasts solar panels with nuclear reactors. Solar panels may require highly centralized industrial systems to produce, but once they are in the field, solar panels are compatible with looser, less coordinated political arrangements. A world of small anarchist communes is fully compatible with solar energy.

Contrast this with nuclear reactors: the prudent ongoing operation of a reactor requires a highly centralized state that is capable of fielding reliable, trustworthy independent inspectors. This state must also be capable of exercising the coercive power to shut down badly maintained or incompetently operated reactors.

The politics of nukes are the politics of a centralized, powerful state; the politics of solar are less determined. Solar is compatible with a wide variety of political systems, including (but not limited to) weak, decentralized states.

(For a further exploration of "Do Artifacts Have Politics?" I highly recommend Ginger Coons' reading guide:)

https://www.not-so-obvious.net/reading-do-artifacts-have-politics/

I really like Winner's framework for exploring technopolitics, but I have my own gloss on it. Winner's framework doesn't explicitly contemplate the idea of technological countermeasures. For example, what if someone were to design a city bus that was low enough to fit under Robert Moses's bridges? At that point, they'd cease to be "racist bridges," and merely become "bridges built by a racist":

https://locusmag.com/feature/commentary-cory-doctorow-technopolitics/

Which brings me to the technopolitics of ad-tech. Lots of people think that advertising is "the original sin of the internet," setting in motion the surveillance dystopia that is closing in on us from all sides today:

https://pluralistic.net/2026/10/17/mercenary-spyware/#discover-tech

I think this is wrong. I think that finding ways to communicate ideas and pitches to the general public is fine. Without some channel for reaching people with ideas and propositions they may not be familiar with, it would be infinitely harder to reach people for political causes. It would also be harder for new books, movies and music to find new audiences. It would be much harder to get people out to your independent craft fair, your zine show, or your No Kings march.

For me, the internet's original sin isn't advertising, it's surveillance. Contrary to what you have been told – and pax Winner's framework – the internet is fully compatible with privacy:

https://pluralistic.net/2025/10/31/losing-the-crypto-wars/#surveillance-monopolism

It wasn't the internet's technopolitics that made it a surveillance nightmare. It was just plain politics. Specifically, our politicians decided to stop enacting and enforcing privacy laws. The last consumer privacy law we got in America was a bill that made it illegal for video store clerks to disclose your VHS rentals:

https://en.wikipedia.org/wiki/Video_Privacy_Protection_Act

(As I type these words, the Supreme Court is poised to eliminate even that dried-up old crumb of privacy protection:)

https://slate.com/news-and-politics/2026/10/supreme-court-privacy-rights-case-bork-kavanaugh.html

The widespread phenomenon of ad-tech companies spying on us is the result of the decision to allow them to do so. That decision has had innumerable negative downstream effects, such as skyrocketing "surveillance prices":

https://pluralistic.net/2025/12/11/nothing-personal/#instacartography

And collapsing "surveillance wages":

https://pluralistic.net/2024/12/18/loose-flapping-ends/#luigi-has-a-point

It's created vast surveillance databases that are critical to Trump's racist pogroms, providing dossiers and precise location data on the people ICE kidnaps to Salvadoran slave-labor camps:

https://pluralistic.net/2026/03/10/ice-tech/#foreseeable-outcomes

Surveillance also promotes oligarchy. Without surveillance, oligarchs must give up more of their fortunes to keep the public happy, because the alternative is spending even more money on guards to keep the public from building guillotines on their lawns. Surveillance lets oligarchs make targeted strikes on restive radicals, which is much cheaper than broad-spectrum policies that make us all better off and neutralize the case for guillotines:

https://pluralistic.net/2025/06/26/autostabilizer/#slicey-bois

These are the technopolitics of surveillance, not advertising. There is nothing about advertising that demands surveillance. For centuries, advertising was not meaningfully linked to surveillance. The decision to fuse surveillance with advertising was just that – a decision, not an inevitability.

Any time we forget this, we let spying tech bosses off the hook. After all, if advertising demands surveillance, then tech bosses are just the avatars of the great forces of history, prisoners of the imperative to spy in order to advertise. By remembering that surveillance advertising is a choice, we put the blame squarely where it belongs: on the guillotineable oligarchs who made that choice, and amassed spectacular fortunes thereby.

Surveillance is political, but surveillance advertising has its own distinct technopolitics, and to understand those technopolitics, we must contrast them with the technopolitics of contextual advertising. Up until a decade or two ago, contextual advertising was simply called "advertising." Contextual advertising is the practice of running refrigerator ads next to articles on cooking and kitchen remodeling; ads for roadside restaurants on highway billboards; ads for Disney vacations in parenting magazines.

Your intuition probably insists that context advertising is less effective than surveillance advertising. After all, surveillance advertising allows a running shoe company to target users who are training for a marathon no matter where they are and no matter what they're doing. Surely this translates into increased "conversions" (clicks and/or purchases, depending on who you're talking to)?

It does, but not by much. Advertisers get about 5% more value from surveillance ads than they do from context ads:

https://weis2019.econinfosec.org/wp-content/uploads/sites/6/2019/05/WEIS_2019_paper_38.pdf

Partly, that's because surveillance ad companies grossly overrate the efficacy of surveillance advertising:

https://peoples-things.ghost.io/youre-doing-it-wrong-notes-on-criticism-and-technology-hype/

But surveillance advertising's anemic returns to advertisers are down to another aspect of the system: its tendency towards monopolization:

https://en.wikipedia.org/wiki/United_States_v._Google_LLC_(2023)

Surveillance is a capital-intensive activity: spying on billions of people as they move through the digital and physical world is incredibly expensive. That is a good part of the reason that online advertising has collapsed into the Meta/Google duopoly, who control about 80% of display advertising.

The harms of surveillance monopolies have a severely distorting effect on policy debates. For example, it's led some anti-monopolists to call for government-issued surveillance identifiers that follow us from birth to death in order to facilitate commercial spying to foster more competition in surveillance:

https://www.thesling.org/what-to-do-about-googles-dominance-of-online-advertising/

Here's the thing about monopolists: they cheat. Google and Meta have an illegal, collusive arrangement to rig the advertising market, overcharging advertisers and underpaying publishers:

https://en.wikipedia.org/wiki/Jedi_Blue

The ad-tech giants have taken in hundreds of billions that they simply can't account for. It's disappeared down a fraud-hole:

https://pluralistic.net/2026/05/25/lying-spies/#spying-liars

All of this has driven the majority of web users to install a privacy-blocker (like EFF's Privacybadger.org), meaning that surveillance ads are disproportionately likely to not even show up in a reader's browser:

https://doc.searls.com/2023/11/11/how-is-the-worlds-biggest-boycott-doing/

So while it's possible that, in a state of nature, a surveillance ad would outperform a context ad, delivering more sales for advertisers and more revenue for publishers, the monopolistic tendency of ad-tech means that publishers earn less from surveillance ads (because more users block them, and because monopolistic ad-tech platforms extract higher commissions), and advertisers see fewer sales from them (because more users block them, and because monopolistic ad-tech platforms extract higher prices).

Context ads, meanwhile, are always going to give power to publishers, because publishers will always understand the materials they publish better than any ad-tech platform could. Commissioning, editing and publishing an article, podcast or video gives a publisher unique and inalienable insight into that material.

Surveillance data about audiences is a kind of ambient vapor floating around websites and places and payments that has to be condensed through a heroic and expensive effort that gives power to whichever company can muster the capital and infrastructure to do so. Meanwhile, information about the content of publishers' offerings arrives pre-refined into ingots that are already in publishers' own possession.

It's possible to run "programmatic ads" without surveillance. Rather than building an ad-tech stack through which publishers transmit sensitive information about their audiences ("Who will pay me to advertise to this 18-34 year old man-child from the outer boroughs who owns an Xbox and has recently researched gonorrhea symptoms?"), we can build systems through which publishers transmit information about their own materials ("Who will advertise to a user with a New York IP address who is reading an article comparing running shoe brands?").

Not only is this possible, but it actually generates more revenues for publishers than the surveillance-based ad-tech stack:

https://techcrunch.com/2020/07/24/data-from-dutch-public-broadcaster-shows-the-value-of-ditching-creepy-ads/

On top of that, publishers who don't gather personal information about users also don't need to show their users those awful pop-up ads asking their permission to gather their data. Everyone hates those notices, and they are yet another negative aspect of surveillance advertising that disappears with the switch to context ads.

An ad-tech stack for context ads is far less prone to monopolization. Such a stack can be "federated," with multiple "demand-side platforms" (the part of the system that advertisers use to place bids for the right to show their ads) all communicating with the same "supply-side platform" (the part of the system publishers use to transmit opportunities to place ads).

This is also in the technopolitics of context ads: they do not tend toward the "efficiencies of scale" that lead to abusive monopolistic middlemen who steal from publishers and advertisers and sell out the public to fascists who want to arrest them and deport them to Salvadoran slave-labor camps.

When the ad-tech sector is composed of smaller companies that are more competitive with one another, it is much harder for any of them to collude to rig the market. That fierce competition also means it's harder to create a cozy conspiracy to lobby together to block privacy laws, and it leaves the companies with lower margins and less retained earnings to spend on those lobbying efforts.

Surveillance ads also promote all kinds of parasitic businesses. The fact that a publisher can serve ads related to users rather than the subject of their media means that sensationalistic and deceptive websites can sell ads that run against content that's totally unrelated to advertisers' products and services. And because it's cheaper to produce lies and garbage, these publishers can undercut the ad prices demanded by high quality outlets and let advertisers reach the same users. This is the whole reason that "chumboxes" exist:

https://en.wikipedia.org/wiki/Chumbox

Just as nuclear power favors a centralized state, surveillance advertising:

• favors middlemen over publishers and advertisers;

• tends toward monopoly;

• favors low-quality media over high-quality production;

• impedes the passage of privacy laws;

• provides authoritarian states with an off-the-books, warrantless source of surveillance data.

And just as solar allows for decentralized, anti-authoritarian societies, context advertising:

• favors publishers over middlemen and advertisers;

• tends towards pluralism and diversity of voices;

• favors high-quality media by reserving the lion's share of the rewards to the producers;

• does not rely on a weak privacy environment;

• does not militate for "democratizing spying" by issuing every person with a permanent advertising identifier.

There's nothing (necessarily) wrong with building systems to tell people about things you want them to know. There's nothing (necessarily) wrong with paying for media with ads. It's possible for both of these things to go awry, but they are not in and of themselves bad. They have contingent technopolitics.

But surveillance ads have completely unavoidable, absolutely ghastly technopolitics. Surveillance ads are bad for publishers, for advertisers, and for democracy. We should ban surveillance ads:

https://www.eff.org/deeplinks/2023/05/save-news-we-must-ban-surveillance-advertising

(Image: Jess, CC BY-SA 4.0, modified).

---

Hey look at this (permalink)

• Trump DOJ Launches Bogus TV News Antitrust Probe
  https://economicpopulist.substack.com/i/220751828/trump-doj-launches-bogus-tv-news-antitrust-probe

• US Rep proposes bill to give video game buyers “ownership,” not “a license” https://arstechnica.com/gaming/2026/10/us-rep-proposes-bill-to-give-video-game-buyers-ownership-not-a-license/

• Saviour or Scoundrel? https://scholarsphere.psu.edu/resources/14308c3b-4f2a-4f39-a365-192c0206f886

• Tiny Little Office https://tinylittleoffice.com/

• Future? No Thanks! – an ecosocialist game https://futurenothanks.com/

---

Object permanence (permalink)

#25yrsago Patrick Nielsen Hayden interviews Mike Ford https://user.well.com/engaged.cgi?c=inkwell.vue&f=0&t=126

#20yrsago Singapore bans Far East Economic Review https://web.archive.org/web/20061010002951/https://www.feer.com/articles1/2006/0610/free/p006.html

#20yrsago Publishing isn’t bestseller-driven https://www.nielsenhayden.com/makinglight/conventional_un/

#20yrsago Why architecture and security don’t mix https://www.schneier.com/blog/archives/2006/10/architecture_an.html

#20yrsago Vista licence: Microsoft’s abusive relationship with you https://wendy.seltzer.org/blog/archives/2006/10/19/forbidding_vistas_windows_licensing_disserves_the_user.html

#20yrsago Boy Scouts of America Concerned About Copyright https://web.archive.org/web/20061110065012/http://sfgate.com/cgi-bin/article.cgi%3Ffile%3D/news/archive/2006/10/20/entertainment/e110452D84.DTL

#15yrsago Canadian Tories admit that Canadians don’t want DRM rules, push for them anyway https://web.archive.org/web/20111022210131/http://www.michaelgeist.ca/content/view/6071/125

#15yrsago Visualizing Herman Cain’s 9-9-9 plan to redistribute wealth from the poor to the rich https://web.archive.org/web/20111021103517/http://jaredbernsteinblog.com/9-9-9-in-one-really-long-graph/

#15yrsago Free Bieber: campaign to kill proposed law that would send you to prison for 5 years for singing copyrighted music on YouTube https://web.archive.org/web/20111020145336/http://freebieber.org/

#15yrsago Belarusian central bank auctions off its sugar bowls https://www.theguardian.com/world/2011/oct/19/belarus-central-bank-sells-office-furniture

#15yrsago Dataviz as defacement: OCCUPY GEORGE https://web.archive.org/web/20111022022046/http://www.occupygeorge.com/

#15yrsago HOWTO avoid a copyright shakedown legal threat: be famous, a politician, a cop, a soldier or a corpse https://torrentfreak.com/undercover-cops-and-politicians-escape-bittorrent-lawsuit-111013/

#10yrsago Popular design guides are responsible for plague of grey type https://web.archive.org/web/20170914051800/https://www.wired.com/2016/10/how-the-web-became-unreadable/

#10yrsago Digital Defenders: a free open-licensed booklet for kids about privacy and cryptography https://edri.org/files/privacy4kids_booklet_web.pdf

#10yrsago Public universities and even the US Navy have sold hundreds of patents to America’s most notorious troll https://www.eff.org/deeplinks/2016/10/inside-intellectual-ventures-portfolio-nearly-500-university-patents

#10yrsago Airportraits: composite photos of all the daily takeoffs from the world’s airports https://mikekelley.art/?category=airportraits

#10yrsago Rich people can afford to buy more sleep than poor people https://arstechnica.com/science/2016/10/the-rich-can-sleep-in-thanks-to-better-transit/

#10yrsago Harry Shearer sues studio over Spinal Tap, says he’s received $98 in royalties over 30 years https://web.archive.org/web/20161224224142/https://www.yahoo.com/movies/harry-shearer-files-125-million-spinal-tap-fraud-suit-copyright-termination-150031664.html

#10yrsago ACLU asks court to reveal 23 secret surveillance laws https://web.archive.org/web/20161019224447/https://theintercept.com/2016/10/19/aclu-wants-secret-surveillance-laws-made-public/

#10yrsago Montana judge unrepentant after sentencing man to 60 days for repeatedly raping his own 12 year old daughter https://edition.cnn.com/2016/10/19/us/montana-judge-incest-case-trnd/index.html

#10yrago Turkish court fines bystander/tourist who sued police for shooting out his eye https://www.hurriyetdailynews.com/kyrgyz-tourist-wounded-in-gezi-protests-ordered-to-pay-debt-to-turkish-state–104964

#10yrsago By stealing from innocents, Chicago PD amassed tens of millions in a secret black budget for surveillance gear https://web.archive.org/web/20160929143255/https://chicagoreader.com/chicago/police-department-civil-forfeiture-investigation/Content?oid=23728922

#10yrsago Turing’s law: UK to retroactively pardon thousands of men prosecuted for having sex with men https://www.bbc.co.uk/news/uk-37711518

#5yrsago The monopoly strategy behind the Google/Microsoft mobile patent wars https://pluralistic.net/2021/10/20/vizio-vs-the-world/#capital-as-power

#5yrsago Copyleft lawsuit against Vizio will allow anyone to defend the commons https://pluralistic.net/2021/10/20/vizio-vs-the-world/#dumbcast

#5yrsago The true, Terry Pratchett-esque origins of the trillion-dollar coin https://pluralistic.net/2021/10/19/moist-von-lipwig/#gimmick-v-gimmick

#1yrago The mad king's digital killswitch https://pluralistic.net/2025/10/20/post-american-internet/#huawei-with-american-characteristics

---

Upcoming appearances (permalink)

• Vancouver: Read, Resist, Repair, Rejoice (Vancouver Writers Festival), Oct 19
  https://writersfest.bc.ca/festival-event-2026/01

• Victoria: Munro's Books, Oct 20
  https://www.munrobooks.com/events/6113620261020

• Vancouver: Life After AI (Vancouver Writers Festival), Oct 22
  https://writersfest.bc.ca/festival-event-2026/46

• Ottawa: Life After AI (Ottawa Writers Festival), Oct 24
  https://writersfestival.org/event/life-after-ai

• Vienna: TED AI, Oct 28-30
  https://tedai-vienna.ted.com/

• Kilkenny (Kilkenomics), Nov 6-8
  https://kilkenomics.com/

• Vancouver: Enshittification (Sid Williams Theatre Society), Nov 10
  https://www.sidwilliamstheatre.com/events/cory-doctorow-talks-enshittification/

• Vancouver: BC Policy Solutions Gala, Nov 12
  https://bcpolicy.ca/gala/

• Oxford: Ministry of the Future, Nov 23
  https://ministryforthefuture.co.uk/events.html

• Sheffield: Reverse Centaur at Juno Books, Nov 25
  https://www.outsavvy.com/event/40274/cory-doctorow-in-conversation

• Virtual: Enshittification, AI, and the Future of Technology (UBC Master of Educational Technology), Nov 28
  https://met.ubc.ca/2026/09/met-speaker-series-cory-doctorow-enshittification-ai-and-the-future-of-technology/

• Oxford: Bennett Oxford Symposium on Open Code in Science, Dec 9
  https://www.bennett.ox.ac.uk/events/2026-bennett-institute-symposium/

• Montreal: World Science Fiction Convention, Sep 2-6
  https://montreal2027.ca/en

---

Recent appearances (permalink)

• Life After AI (Brain Bar)
  https://www.youtube.com/watch?v=IPPa43-n0vI

• Terms of Service with Clare Duffy (CNN)
  https://www.cnn.com/audio/podcasts/terms-of-service-with-clare-duffy/episodes/458ce968-af5d-11f0-b539-13ed2afe25f8

• AI, Work, and Power (Software Engineering Daily)
  AI, Work, and Power https://softwareengineeringdaily.com/podcasts/cory-doctorow-on-ai-work-and-power/

• AI, Corporate Power, and the Fight for Worker Control (Plutopia)
  https://plutopia.io/cory-doctorow-ai-corporate-power-and-the-fight-for-worker-control/

• How to Think About AI—Before It’s Too Late (Daniel Solove)
  https://www.youtube.com/watch?v=_0xR3uEgGcc

---

Latest books (permalink)

• "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026
  https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/

• "Canny Valley": A limited edition collection of the collages I create for Pluralistic, self-published, September 2025 https://pluralistic.net/2025/09/04/illustrious/#chairman-bruce

• "Enshittification: Why Everything Suddenly Got Worse and What to Do About It," Farrar, Straus, Giroux, October 7 2025
  https://us.macmillan.com/books/9780374619329/enshittification/

• "Picks and Shovels": a sequel to "Red Team Blues," about the heroic era of the PC, Tor Books (US), Head of Zeus (UK), February 2025 (https://us.macmillan.com/books/9781250865908/picksandshovels).

• "The Bezzle": a sequel to "Red Team Blues," about prison-tech and other grifts, Tor Books (US), Head of Zeus (UK), February 2024 (thebezzle.org).

• "The Lost Cause:" a solarpunk novel of hope in the climate emergency, Tor Books (US), Head of Zeus (UK), November 2023 (http://lost-cause.org).

• "The Internet Con": A nonfiction book about interoperability and Big Tech (Verso) September 2023 (http://seizethemeansofcomputation.org). Signed copies at Book Soup (https://www.booksoup.com/book/9781804291245).

• "Red Team Blues": "A grabby, compulsive thriller that will leave you knowing more about how the world works than you did before." Tor Books http://redteamblues.com.

• "Chokepoint Capitalism: How to Beat Big Tech, Tame Big Content, and Get Artists Paid, with Rebecca Giblin", on how to unrig the markets for creative labor, Beacon Press/Scribe 2022 https://chokepointcapitalism.com

---

Upcoming books (permalink)

• "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

• "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

• "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2027

• "The Memex Method," Farrar, Straus, Giroux, 2027

---

Colophon (permalink)

Today's top sources:

Currently writing:

• “Once Is Enemy Action,” a science fiction novel about the origins of modern technofascism. Today's words: 574 (7730 total).

• "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Fourth draft completed. Submitted to editor.

• A Little Brother short story about DIY insulin PLANNING

---

This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.

---

How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

Today's links

• Israeli ad-tech company was a delivery system for "mercenary spyware": And they used Google, Facebook and every other major ad platform to do it.
• Hey look at this: Delights to delectate.
• Object permanence: Big Mouth Billy Bass x Linux; No-Fly lists v common sense; Lemony Snicket advises the 1%; "Aloha From Hell"; KSR v Elon Musk; "Everything Belongs to the Future"; Trump's mail-servers run Win2003; Copyfraud v covid.
• Upcoming appearances: Vancouver, Victoria, Ottawa, Vienna, Kilkenny, Oxford, Sheffield, Virtual, Oxford, Montreal.
• Recent appearances: Where I've been.
• Latest books: You keep readin' em, I'll keep writin' 'em.
• Upcoming books: Like I said, I'll keep writin' 'em.
• Colophon: All the rest.

---

Israeli ad-tech company was a delivery system for "mercenary spyware" (permalink)

More than half of all internet users have installed an ad-blocker; Doc Searls calls it the largest consumer boycott in history. As large as that boycott is, everyone – yes, everyone – should block every "programmatic" ad, because the entire system is so insecure that failing to do so could result in the total compromise of any or all of your digital devices.

That's the inescapable conclusion of Citizen Lab's latest blockbuster investigative report, "Exposing AdFection," which reveals how the largest ad-tech companies in the world, including Google and Facebook, allowed themselves to be hijacked by a "mercenary spyware" company that used the ad system to locate targeted individuals and serve "zero-click malware" that took over their computers and phones without them having to take any action:

https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

These tech giants amassed detailed surveillance dossiers on virtually every internet user, and they've assigned each of us unique, persistent identifiers, like a Social Security Number for spying. These companies also allow advertisers – or anyone pretending to be an advertiser – to serve blobs of code (which is all an ad is) to anyone based on those identifiers.

This allowed an Israeli spyware company called Discover-Tech (which masquerades as an ad-tech company) to sell totalitarian governments and sleazy corporate mercenaries the ability to pluck individual internet users out of the billions who log in every day and then serve "malicious ads" (that is, blobs of arbitrary code) to those targeted users. These malicious ads contained "no-click, zero-day" attacks, which meant that they exploited previously unknown vulnerabilities to take over devices without any user interaction. The mere act of loading a web-page or opening an app that relied on one of these gigantic ad-tech companies to serve ads was enough to compromise your device. No clicks needed, and no warning.

Among the targets of this attack campaign were the computers of workers at Al Jazeera. They were attacked with malware from the mercenary spyware company Candiru (which now calls itself "Integrity Labs" because irony is not dead). Beyond Candiru, Discover-Tech also facilitates attacks by numerous criminal mercenary spyware companies, serving ads on hundreds of thousands of sites and apps.

Discover-Tech was "certified" as a safe supplier by Google, Yandex, Microsoft, Beeswax (a division of Comcast) and IAB, the ad-tech industry's leading professional association. Ironically, Discover-Tech even attacked users by serving them malicious GDPR notices that appeared to let users opt out of commercial surveillance.

Because Discover-Tech was certified by all these industry bodies and firms, it had access to more than four billion ad-auctions, meaning that on billions of occasions, it was able to collect the identities of users loading apps and visiting websites, check them against the list of targets, and attack any victims it discovered through this dragnet.

Discover-Tech is an Israeli company with ties to other Israeli spyware and hacking companies, including through its board, whose members included Eric Banoun ("One of the pioneers of offensive cyber in Israel" –Haaretz). They have overlaps, relationships and affiliations with a rogue's gallery of Israeli companies, including the notorious NSO Group, who routinely sell cyber-weapons to the world's worst governments and whose products have been used to attack journalists, embassy workers, and activists.

The whole incident highlights the monumental insecurity of the ad-tech industry, whose indiscriminate and voracious surveillance and manifestly insufficient vetting and security auditing now expose every internet user in the world to terrifying targeted attacks. These companies – including Google, a thrice-convicted monopolist whose surveillance tendrils are wrapped around the whole world – claim that they operate their networks with prudence and oversight. But the proof is in the pudding: for years, they've played host to a murderer's row of cyber-mercenaries who used their infrastructure to attack journalists and others.

The only way to avoid this is to block ads. This is easy enough to do in a browser (which is why the majority of internet users have installed an ad-blocker in their browsers), but it's illegal to reverse-engineer and modify an app so you can block the ads in it:

https://pluralistic.net/2026/07/21/dickovers/#block-element

Many websites run anti-ad-block scripts that push out nagging, guilt-tripping notices that call you a thief and a cheapskate for blocking ads. Ignore those notices: if a website is running "programmatic" ads that allow arbitrary third parties to spy on billions of people and target individuals for malicious device takeovers, they are charging too high a price to see their content.

Some sites go further: their notices demand that you either turn off your ad-blocker or pay for a subscription. This "pay or okay" scheme is illegal in Europe, California and other territories with strong privacy laws, and they are morally bankrupt besides. Privacy shouldn't be a luxury item and everyone deserves to be secure from cyber-attacks:

https://noyb.eu/en/noybs-pay-or-okay-report-how-companies-make-you-pay-privacy

This report also provides the most comprehensive rebuttal to a dangerous idea that refuses to die: that we should improve competition in the ad-tech sector by assigning every internet user a mandatory, government-issued advertising ID to "democratize" ad-targeting and followup (which the sector calls "attribution"):

https://pluralistic.net/2024/08/07/revealed-preferences/#extinguish-v-improve

Despite all this, none of it is an indictment of ads per se. The problem here isn't advertising, it's surveillance. The ad-tech sector has convinced advertisers that targeting ads to users rather than content will massively improve ad performance. The evidence for this is very poor: targeted ads improve clickthrough rates by less than 5% (relative to content-based ads that relate to the substance of the page you're looking at), and they're incredibly expensive (and very dangerous!) to serve.

On top of all that, surveillance-based ads shift power away from publishers (who know more about the materials they publish than any ad-tech company ever will) to spying ad-tech companies (who can spy on users in ways that no publisher could ever match). Whatever minor additional revenues surveillance advertising can wring out of the market are totally swamped by the cost of the ad-tech sector's own operations, which the ad-tech sector makes up for by grossly underinvesting in security and by colluding to cheat publishers and advertisers, charging more for ads and paying less to the websites that run them:

https://en.wikipedia.org/wiki/Jedi_Blue

If we want to improve competition in advertising services, the answer isn't to facilitate spying (which also allows the world's scummiest cyber-mercenaries to stage and serve targeted attacks). We should ban surveillance advertising altogether, restoring context-based ads to their role as the way that publishers make an honest living without selling out their audiences:

https://pluralistic.net/2023/05/31/context-ads/#class-formation

---

Hey look at this (permalink)

• Philips updates instructions for ultrasound system linked to 4 deaths https://www.medtechdive.com/news/philips-updates-instructions-for-ultrasound-system-linked-to-4-deaths/832692/

• Don’t be fooled—LLMs don’t reason https://www.technologyreview.com/2026/10/02/1145639/dont-be-fooled-llms-dont-reason/

• Beneath resilient financial markets, risks remain elevated and vulnerabilities persist https://www.imf.org/en/publications/gfsr/issues/2026/10/13/global-financial-stability-report-october-2026

• Ultimate gridfinity drawer configurator https://makerworld.com/en/models/2737065-ultimate-gridfinity-drawer-configurator

• Is Blockbuster Video the Answer to Our Digital Privacy Woes? https://www.thenation.com/article/society/digital-privacy-salazar-paramount/

• Trump Is Encouraging Airlines to Scam Passengers in Every Way Possible https://newrepublic.com/article/216435/trump-airline-fees-fines-passenger-rights-scam

---

Object permanence (permalink)

#25yrsago Linux on a Big Mouth Billy Bass https://web.archive.org/web/20010927153043/http://bigmouth.here-n-there.com/

#20yrsago No-Fly lists even stupider than suspected https://web.archive.org/web/20061019002553/http://rawstory.com/showoutarticle.php?src=http%3A%2F%2Fwww.cbsnews.com%2Fstories%2F2006%2F10%2F05%2F60minutes%2Fmain2066624.shtml

#20yrsago Canadian MP booted for his blog https://web.archive.org/web/20061026153747/http://www.cbc.ca/canada/story/2006/10/18/turner-caucus.html

#20yrsago Recording industry shuts out Brazilian legal scholars https://web.archive.org/web/20061103225020/http://www.a2kbrasil.org.br/ENG/SIGN-A-PETITION-FOR-AMENDING-THE

#20yrsago How pickpockets work https://web.archive.org/web/20070110023812/http://www.kiplinger.com/magazine/archives/2006/11/mystory.html

#15yrsago Why are more people opting for legal name-changes than ever before? https://web.archive.org/web/20111020163908/http://www.bbc.co.uk/news/magazine-15333140

#15yrsago Advice to the 1% from Lemony Snicket https://occupywriters.com/works/by-lemony-snicket/

#15yrsago Proposed Australian law makes it an offense to insult Gaming Minister Michael O’Brien https://web.archive.org/web/20120507161803/http://www.heraldsun.com.au/news/more-news/surely-this-is-a-joke/story-fn7x8me2-1226167552466

#15yrsago Aloha From Hell: Sandman Slim goes back to Hell and kicks more ass https://memex.craphound.com/2011/10/18/aloha-from-hell-sandman-slim-goes-back-to-hell-and-kicks-more-ass/

#10yrsago California DMV thinks “INFOS3C” is a dirty word https://www.techdirt.com/2016/10/17/california-dmv-rejects-1nfos3c-vanity-plate-because-sexual-connotation/

#10yrsago Howard Stern won’t release Trump tapes https://www.billboard.com/music/music-news/howard-stern-on-replaying-his-donald-trump-interviews-it-would-be-a-betrayal-7542079/

#10yrsago Kim Stanley Robinson says Elon Musk’s Mars plan is a “1920s science-fiction cliché” https://web.archive.org/web/20161018043554/http://www.bloomberg.com/news/articles/2016-10-17/why-elon-musk-s-mars-vision-needs-some-real-imagination

#10yrsago UK’s Investigatory Powers Tribunal says GHCQ illegally spied for 17 years https://www.theverge.com/2016/10/17/13305270/uk-illegal-surveillance-gchq-investigatory-powers-tribunal

#10yrsago Project Include cuts off Y Combinator because Peter Thiel is a part-time investor there https://web.archive.org/web/20161019043240/https://motherboard.vice.com/read/horrified-by-trump-silicon-valley-leaders-debate-cutting-ties-to-peter-thiel

#10yrsago Islamophobic terrorist cell planned a “bloodbath” in Kansas, wanted to kill Muslim babies https://web.archive.org/web/20161018144035/https://www.washingtonpost.com/news/post-nation/wp/2016/10/15/it-will-be-a-bloodbath-inside-the-kansas-militia-plot-to-ignite-a-religious-war/?utm_term=.a9d769256cf6

#10yrsago Everything Belongs to the Future: a tale of pharmadystopian, immortal gerontocrats https://memex.craphound.com/2016/10/18/everything-belongs-to-the-future-a-tale-of-pharmadystopian-immortal-gerontocrats/

#10yrsago UK government proposes issuing Britons with unique porn-viewing ID numbers https://www.openrightsgroup.org/blog/a-database-of-the-uks-porn-habits-what-could-possibly-go-wrong/

#10yrsago Donald Trump’s mail-servers are running Windows 2003 https://pluralistic.net/2021/10/18/labor-shortage-discourse-time/#core

#5yrsago Copyfraudster censors investigation of implausible covid gadget https://pluralistic.net/2021/10/18/labor-shortage-discourse-time/#copyfraud

#5yrsago Corporatism made John Deere ripe for a strike https://pluralistic.net/2021/10/18/labor-shortage-discourse-time/#deere-dash

---

Upcoming appearances (permalink)

• Vancouver: Read, Resist, Repair, Rejoice (Vancouver Writers Festival), Oct 19
  https://writersfest.bc.ca/festival-event-2026/01

• Victoria: Munro's Books, Oct 20
  https://www.munrobooks.com/events/6113620261020

• Vancouver: Life After AI (Vancouver Writers Festival), Oct 22
  https://writersfest.bc.ca/festival-event-2026/46

• Ottawa: Life After AI (Ottawa Writers Festival), Oct 24
  https://writersfestival.org/event/life-after-ai

• Vienna: TED AI, Oct 28-30
  https://tedai-vienna.ted.com/

• Kilkenny (Kilkenomics), Nov 6-8
  https://kilkenomics.com/

• Vancouver: Enshittification (Sid Williams Theatre Society), Nov 10
  https://www.sidwilliamstheatre.com/events/cory-doctorow-talks-enshittification/

• Vancouver: BC Policy Solutions Gala, Nov 12
  https://bcpolicy.ca/gala/

• Oxford: Ministry of the Future, Nov 23
  https://ministryforthefuture.co.uk/events.html

• Sheffield: Reverse Centaur at Juno Books, Nov 25
  https://www.outsavvy.com/event/40274/cory-doctorow-in-conversation

• Virtual: Enshittification, AI, and the Future of Technology (UBC Master of Educational Technology), Nov 28
  https://met.ubc.ca/2026/09/met-speaker-series-cory-doctorow-enshittification-ai-and-the-future-of-technology/

• Oxford: Bennett Oxford Symposium on Open Code in Science, Dec 9
  https://www.bennett.ox.ac.uk/events/2026-bennett-institute-symposium/

• Montreal: World Science Fiction Convention, Sep 2-6
  https://montreal2027.ca/en

---

Recent appearances (permalink)

• Life After AI (Brain Bar)
  https://www.youtube.com/watch?v=IPPa43-n0vI

• Terms of Service with Clare Duffy (CNN)
  https://www.cnn.com/audio/podcasts/terms-of-service-with-clare-duffy/episodes/458ce968-af5d-11f0-b539-13ed2afe25f8

• AI, Work, and Power (Software Engineering Daily)
  AI, Work, and Power https://softwareengineeringdaily.com/podcasts/cory-doctorow-on-ai-work-and-power/

• AI, Corporate Power, and the Fight for Worker Control (Plutopia)
  https://plutopia.io/cory-doctorow-ai-corporate-power-and-the-fight-for-worker-control/

• How to Think About AI—Before It’s Too Late (Daniel Solove)
  https://www.youtube.com/watch?v=_0xR3uEgGcc

---

Latest books (permalink)

• "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026
  https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/

• "Canny Valley": A limited edition collection of the collages I create for Pluralistic, self-published, September 2025 https://pluralistic.net/2025/09/04/illustrious/#chairman-bruce

• "Enshittification: Why Everything Suddenly Got Worse and What to Do About It," Farrar, Straus, Giroux, October 7 2025
  https://us.macmillan.com/books/9780374619329/enshittification/

• "Picks and Shovels": a sequel to "Red Team Blues," about the heroic era of the PC, Tor Books (US), Head of Zeus (UK), February 2025 (https://us.macmillan.com/books/9781250865908/picksandshovels).

• "The Bezzle": a sequel to "Red Team Blues," about prison-tech and other grifts, Tor Books (US), Head of Zeus (UK), February 2024 (thebezzle.org).

• "The Lost Cause:" a solarpunk novel of hope in the climate emergency, Tor Books (US), Head of Zeus (UK), November 2023 (http://lost-cause.org).

• "The Internet Con": A nonfiction book about interoperability and Big Tech (Verso) September 2023 (http://seizethemeansofcomputation.org). Signed copies at Book Soup (https://www.booksoup.com/book/9781804291245).

• "Red Team Blues": "A grabby, compulsive thriller that will leave you knowing more about how the world works than you did before." Tor Books http://redteamblues.com.

• "Chokepoint Capitalism: How to Beat Big Tech, Tame Big Content, and Get Artists Paid, with Rebecca Giblin", on how to unrig the markets for creative labor, Beacon Press/Scribe 2022 https://chokepointcapitalism.com

---

Upcoming books (permalink)

• "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

• "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

• "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2027

• "The Memex Method," Farrar, Straus, Giroux, 2027

---

Colophon (permalink)

Today's top sources:

Currently writing:

• “Once Is Enemy Action,” a science fiction novel about the origins of modern technofascism. Today's words: 563 (26602 total).

• "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Fourth draft completed. Submitted to editor.

• A Little Brother short story about DIY insulin PLANNING

---

This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.

---

How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

Today's links

• Load-bearing: Digital sovereignty vs AI.
• Hey look at this: Delights to delectate.
• Object permanence: Anthrax penmanship; Stolen WEBGEEK license plate; Arizona Republic endorses Clinton, gets death threats; Against the great forces of history.
• Upcoming appearances: Vancouver, Victoria, Ottawa, Vienna, Kilkenny, Oxford, Sheffield, Virtual, Oxford, Montreal.
• Recent appearances: Where I've been.
• Latest books: You keep readin' em, I'll keep writin' 'em.
• Upcoming books: Like I said, I'll keep writin' 'em.
• Colophon: All the rest.

---

Load-bearing (permalink)

You find the weirdest stuff inside your walls. Our house was built in 1949 and we're its third owner, and I have no idea what those other people were doing, but at one point someone installed a junction box full of live, bare wires that they filled with crumpled newspaper (!); and don't get me started on the decision not to put vapor barriers in the kitchen windows (we were one good shake away from the entire front of the house falling down when we discovered that one, and while it cost us an extra $19,000 to fix, that was still cheaper than rebuilding the whole front of the house).

Plus there was the unpermitted drainage system installed down the side of the house that must have attracted some (undocumented) planning inspector negativity; at least, that's the only reason I can think of for someone to have filled those drains with concrete (!!), a fact we discovered during the first heavy rainfall after moving in, when the water rose to shin-height (!!!).

But the weirdest and most nerve-wracking mysteries were the "structural" members of dubious quality, placement and utility. Some of them only seemed to be holding stuff up, but on closer inspection turned out to be free-floating 2x4s, not anchored to anything. On more than one occasion, our builders have moved jacks into position and removed those random uprights, only to discover that they weren't holding anything up.

Say what you will about this method, but it is decisive: if you remove a vertical member and nothing falls down, you can be pretty sure that wasn't a load-bearing member.

(This is a metaphor about AI.)

You can be forgiven for rolling your eyes when the subject of "digital sovereignty" comes up. Rhetorically, "digital sovereignty" is a coded way for a politician to say, "We should build a fuckton of AI data-centers while bypassing any environmental review":

https://datacentremagazine.com/technology-and-ai/keir-starmers-2bn-pledge-how-the-uk-plans-to-advance-ai

But AI has nothing to do with digital sovereignty. It is not load-bearing. All it takes to understand this is a little thought-experiment. Imagine that we removed all the chatbots from Canada, or the UK, or the EU, or the USA. What would fall down?

Nothing important.

Every public administrative body – national, regional and local – would continue to function. Every firm – large and small – would continue to trade. Households would be unscathed, save for their youngest members, who would suffer the indignity and tedium of having to do their own homework again.

Which is not to say that "digital sovereignty" is a nothingburger. The walls of our nations are filled with load-bearing digital members. It's just that these are the most boring, regular-degular-ass technologies imaginable.

Like Microsoft Office 365. Take away M365 and every ministry collapses, every firm shutters, and many if not most households will be in serious trouble.

And here's the thing: Microsoft CEO Satya Nadella paid $1m out of his own pocket to join the murderer's row of tech CEOs who sat behind Trump on the inaugural dais:

https://apnews.com/article/trump-inauguration-tech-billionaires-zuckerberg-musk-wealth-0896bfc3f50d941d62cebc3074267ecd

Microsoft donated $10 million to Trump's Epstein Memorial Ballroom:

https://www.geekwire.com/2026/leaked-list-shows-what-microsoft-amazon-and-other-tech-giants-are-giving-for-the-white-house-ballroom/

Microsoft provides the back-end administrative infrastructure for Trump's racist pogroms (take away M365 and ICE would collapse):

https://www.theguardian.com/us-news/2026/feb/17/ice-microsoft-technology-immigration-crackdown

The CEO of Microsoft France admitted that if Trump ordered the company to spy on French citizens' data (or the data of the French government), his company would comply, in secret:

https://www.forbes.com/sites/emmawoollacott/2025/07/22/microsoft-cant-keep-eu-data-safe-from-us-authorities/

And here's the kicker: Microsoft has terminated the M365 and Outlook access of international public officials whose official acts made Trump angry, starting with the Chief Prosecutor of the International Criminal Court, who lost his accounts after he swore out the genocide warrant for Netanyahu:

https://www.computerweekly.com/opinion/Microsofts-ICC-email-block-reignites-European-data-sovereignty-concerns

This is a white-hot, 278-alarm digital sovereignty dumpster-fire. M365 – as well as cloud software from Oracle, Google, Apple, Amazon and other US tech giants that have fused themselves with the Trump regime in exchange for tax breaks and antitrust forbearance – is load-bearing, and worse, those 2x4s are filled with termites and dry-rot.

Digital sovereignty is as real as real can be. It just has nothing to do with AI. AI isn't load-bearing. Boring-ass tech monopolist cloud software is…and we can not trust it:

https://pluralistic.net/2026/01/01/39c3/#the-new-coalition

---

Hey look at this (permalink)

• (not) solitaire https://notsolitaire.com/

• Steering AI Beyond Automation https://www.normaltech.ai/p/steering-ai-beyond-automation

• Wealth Inequality in America Drawn to scale https://dreamagainusa.org/

• Sally Rooney books withdrawn in UK over Palestine Action support https://www.bbc.com/news/articles/cmx23q4g307vo

• Trump’s Great Gift to Chinese Automakers https://prospect.org/2026/10/15/trumps-great-gift-to-chinese-automakers-ev-sales-oil-diesel/

---

Object permanence (permalink)

#25yrsago Anthrax terrorist's handwriting https://web.archive.org/web/20011017003926/http://dailynews.yahoo.com/h/p/nm/20011016/ts/mdf70100.html

#20yrsago Help find stolen WEB GEEK license plate https://web.archive.org/web/20061017222733/https://www.backupbrain.com/2006_10_15_archive.html#a004964#a004964

#15yrsago UK media swallowed the “adult content” filter line https://www.theguardian.com/technology/2011/oct/17/adult-content-filters-good-parenting

#10yrsago Arizona Republic editor responds to death threats following Clinton endorsement https://eu.azcentral.com/story/opinion/2016/10/16/publisher-response-to-threats-after-republic-endorsement-clinton-trump/92058964/

#5yrsago Against the great forces of history https://pluralistic.net/2021/10/17/against-the-great-forces-of-history/

---

Upcoming appearances (permalink)

• Vancouver: Read, Resist, Repair, Rejoice (Vancouver Writers Festival), Oct 19
  https://writersfest.bc.ca/festival-event-2026/01

• Victoria: Munro's Books, Oct 20
  https://www.munrobooks.com/events/6113620261020

• Vancouver: Life After AI (Vancouver Writers Festival), Oct 22
  https://writersfest.bc.ca/festival-event-2026/46

• Ottawa: Life After AI (Ottawa Writers Festival), Oct 24
  https://writersfestival.org/event/life-after-ai

• Vienna: TED AI, Oct 28-30
  https://tedai-vienna.ted.com/

• Kilkenny (Kilkenomics), Nov 6-8
  https://kilkenomics.com/

• Vancouver: Enshittification (Sid Williams Theatre Society), Nov 10
  https://www.sidwilliamstheatre.com/events/cory-doctorow-talks-enshittification/

• Vancouver: BC Policy Solutions Gala, Nov 12
  https://bcpolicy.ca/gala/

• Oxford: Ministry of the Future, Nov 23
  https://ministryforthefuture.co.uk/events.html

• Sheffield: Reverse Centaur at Juno Books, Nov 25
  https://www.outsavvy.com/event/40274/cory-doctorow-in-conversation

• Virtual: Enshittification, AI, and the Future of Technology (UBC Master of Educational Technology), Nov 28
  https://met.ubc.ca/2026/09/met-speaker-series-cory-doctorow-enshittification-ai-and-the-future-of-technology/

• Oxford: Bennett Oxford Symposium on Open Code in Science, Dec 9
  https://www.bennett.ox.ac.uk/events/2026-bennett-institute-symposium/

• Montreal: World Science Fiction Convention, Sep 2-6
  https://montreal2027.ca/en

---

Recent appearances (permalink)

• Life After AI (Brain Bar)
  https://www.youtube.com/watch?v=IPPa43-n0vI

• Terms of Service with Clare Duffy (CNN)
  https://www.cnn.com/audio/podcasts/terms-of-service-with-clare-duffy/episodes/458ce968-af5d-11f0-b539-13ed2afe25f8

• AI, Work, and Power (Software Engineering Daily)
  AI, Work, and Power https://softwareengineeringdaily.com/podcasts/cory-doctorow-on-ai-work-and-power/

• AI, Corporate Power, and the Fight for Worker Control (Plutopia)
  https://plutopia.io/cory-doctorow-ai-corporate-power-and-the-fight-for-worker-control/

• How to Think About AI—Before It’s Too Late (Daniel Solove)
  https://www.youtube.com/watch?v=_0xR3uEgGcc

---

Latest books (permalink)

• "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026
  https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/

• "Canny Valley": A limited edition collection of the collages I create for Pluralistic, self-published, September 2025 https://pluralistic.net/2025/09/04/illustrious/#chairman-bruce

• "Enshittification: Why Everything Suddenly Got Worse and What to Do About It," Farrar, Straus, Giroux, October 7 2025
  https://us.macmillan.com/books/9780374619329/enshittification/

• "Picks and Shovels": a sequel to "Red Team Blues," about the heroic era of the PC, Tor Books (US), Head of Zeus (UK), February 2025 (https://us.macmillan.com/books/9781250865908/picksandshovels).

• "The Bezzle": a sequel to "Red Team Blues," about prison-tech and other grifts, Tor Books (US), Head of Zeus (UK), February 2024 (thebezzle.org).

• "The Lost Cause:" a solarpunk novel of hope in the climate emergency, Tor Books (US), Head of Zeus (UK), November 2023 (http://lost-cause.org).

• "The Internet Con": A nonfiction book about interoperability and Big Tech (Verso) September 2023 (http://seizethemeansofcomputation.org). Signed copies at Book Soup (https://www.booksoup.com/book/9781804291245).

• "Red Team Blues": "A grabby, compulsive thriller that will leave you knowing more about how the world works than you did before." Tor Books http://redteamblues.com.

• "Chokepoint Capitalism: How to Beat Big Tech, Tame Big Content, and Get Artists Paid, with Rebecca Giblin", on how to unrig the markets for creative labor, Beacon Press/Scribe 2022 https://chokepointcapitalism.com

---

Upcoming books (permalink)

• "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

• "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

• "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2027

• "The Memex Method," Farrar, Straus, Giroux, 2027

---

Colophon (permalink)

Today's top sources:

Currently writing:

• “Once Is Enemy Action,” a science fiction novel about the origins of modern technofascism. Today's words: 503 (26039 total).

• "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Fourth draft completed. Submitted to editor.

• A Little Brother short story about DIY insulin PLANNING

---

This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.

---

How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

Today's links

• Expedia amazoned hotel rooms: Everything more expensive for everyone, monopolies everywhere, and we're all screwed.
• Hey look at this: Delights to delectate.
• Object permanence: Delta v dovening; "Play Money"; Alabama's ethnic cleansing; We trust neuroscience over psychology; Billionaires' anti-homeless pogrom; Game devs v DRM; What security means; Microsoft, tear down that wall! Publisher won't revert rights; SNL's Trump/Clinton debate; Chicago Tribune's murder; AI after AI.
• Upcoming appearances: Paris, Vancouver, Victoria, Ottawa, Vienna, Kilkenny, Oxford, Sheffield, Oxford, Montreal.
• Recent appearances: Where I've been.
• Latest books: You keep readin' em, I'll keep writin' 'em.
• Upcoming books: Like I said, I'll keep writin' 'em.
• Colophon: All the rest.

---

Expedia amazoned hotel rooms (permalink)

No matter where you shop, you're getting screwed by Amazon. Amazon has found a way to make everything you buy – at Target, at a mom-and-pop shop, even direct from the manufacturer – more expensive. And they're not the only one: Expedia's done the same thing, but for hotel rooms.

Here's how Amazon broke the economy: first, they locked in a key group of shoppers. The vast majority of affluent shoppers in the USA have Amazon Prime accounts. Having prepaid for a year's shipping in advance, those Prime subscribers start their purchasing journey by searching Amazon, and if they find what they're looking for, that's where it ends.

America's affluent top decile – the 10% of richest Americans – do the majority of America's shopping, a phenomenon that has only been accelerated by America's precipitous slide into oligarchy, which has exhausted the savings and the credit-card limits and the home equity of the majority of Americans, who increasingly can't afford to buy anything:

https://dreamagainusa.org/

If you want to sell things in America, you must sell them in the place where the top decile shops, and that's Amazon. For merchants, that is an incredibly expensive proposition: 51-60% of every dollar you spend with an independent merchant on Amazon is claimed by Amazon through junk fees, listing fees, commissions, processing fees and other scams:

https://pluralistic.net/2026/09/04/cheating-at-fraud/#absentee-rentier

Merchants don't have 51-60% margins they can afford to turn over to Amazon. To remain viable while selling on Amazon, they have to raise prices. Amazon doesn't mind if prices go up, so long as Amazon's price remains competitive. So Amazon imposes a requirement on its suppliers called "most favored nation," which requires sellers to offer their best price on Amazon:

https://pluralistic.net/2026/02/25/most-favored-nation/#price-fixing

Practically speaking, that means that when you raise your price on Amazon, you must raise your prices everywhere by the same amount, which means that no matter where you shop (Target, Walmart, the corner store or direct from the factory), you pay the Amazon Tax.

The Amazon Tax is a prime (you should forgive the expression) example of enshittification, in which an intermediary (a business that sits between buyers and sellers, AKA, "a platform") screws both customers and sellers to benefit itself.

But Amazon isn't the only example of a powerful digital intermediary that has used its market power to impose an economy-wide tax. Wherever you look online, you find digital giants who grew the way Amazon grew (buying all of their competitors) and then did what Amazon did (squeezing buyers and sellers, making prices higher everywhere).

That's what happened with Expedia. Almost every travel site you can find online has been purchased by Expedia (Hotels.com, Travelocity, and Orbitz), and the ones that aren't Expedia subsidiaries were acquired by its main rival, Priceline (Booking.com, Kayak, Agoda and even Opentable). Nearly all the hotel rooms are booked by a tiny minority of travelers – largely that same top decile that Amazon has so thoroughly captured and locked in – and hoteliers can't live without their business, and they're almost all Expedia and/or Priceline customers. Expedia accounts for 80% of all hotel bookings by dollar value.

Expedia's position, in other words, is basically Amazon's position, so Expedia is doing exactly what Amazon is doing: they charge huge fees to hotels, and then force the hotels to raise their prices everywhere through a "most favored nation" deal:

https://storage.courtlistener.com/recap/gov.uscourts.wawd.369601/gov.uscourts.wawd.369601.1.0.pdf

But – as Lee Hepner writes for the BIG newsletter – Expedia has figured out ways to out-Amazon Amazon. They've copied one of Amazon's sleaziest businesses, and made it worse:

https://www.thebignewsletter.com/p/how-expedia-rigs-travel-markets-and

Here's Amazon's sleaziest commercial practice: when you search Amazon, the top results for your search aren't the best matches for your queries; they're products sold by the companies willing to pay the most for search placement, in a "real-time auction" that runs every time you search. The cost of winning that auction comes out of your pocket through higher prices: the first result for an Amazon query is, on average, 29% more expensive than the best match. The top row is 25% more expensive. On average, the best match for your query is 17 positions down the screen, on the second page, where almost no one ever bothers to scroll:

https://pluralistic.net/2023/11/03/subprime-attention-rent-crisis/#euthanize-rentiers

This rip-off is Amazon's most profitable line of business, more profitable than AWS or Prime. It makes the company more than $80b/year. And – incredibly – Expedia's found a way to make it even worse.

Like Amazon, Expedia auctions off its search results. They call this their "VIP listing" program. Practically speaking, hotels have to pay for this, because it boosts booking rates by 42% (the first ten results on an Expedia search-results page get 62% of the clicks). VIP listing is expensive for the merchant – but it's even more expensive for you and me.

That's because Expedia requires hotels in its VIP listings programs to raise their prices on non-Expedia sites by 10-25%…INDEFINITELY.

Let me repeat that: to stay in business, hotels need to be on Expedia. To stay in business on Expedia, hotels have to raise their prices to pay Expedia's junk fees, but they have to raise their prices everywhere else. But to really stay in business on Expedia, hotels have to use the VIP program, which is even more expensive. And – one more time – hotels in the VIP program have to jack up their prices everywhere else, INDEFINITELY. This means that, throughout the economy, hotel prices are rising at a superinflationary rate, because Expedia – who command 80% of the market – are pushing those prices up.

This goes a long way to explaining why US hotel rates rose 58% from a 2020 average of $103/night to a 2025 average of $162/night. It explains why hotel prices rose by 5% last year, which is double the rate of inflation. And this is why Expedia stock is up 65% since the start of the Iran war, a fact that Expedia CEO Ariane Gorin attributes to "higher margins" from "higher prices":

https://s202.q4cdn.com/757635260/files/doc_financials/2026/q2/Q2-2026-Earnings-Presentation-Final.pdf

In his coverage of the Expedia lawsuit – which brought many of these details to light – Hepner notes that hotels themselves have undergone near-total cartelization, with Hilton, Marriott, and Choice International owning the majority of all hotels after a string of acquisitions that went largely unchallenged by slumbering antitrust regulators around the world. These consolidated chains have also jacked up prices and enshittified their service, slashing housekeeping and check-in staff and allowing their facilities to slip into disrepair.

This, too, is characteristic of monopolization: whenever a monopoly takes over part of its supply chain, the rest of the supply chain consolidates to prevent itself from being ripped off by the new giant. This is the story of publishers consolidating to defend themselves from Borders/B&N, Walmart and Costco, then Amazon; and it's the story of literary agencies consolidating to resist the power of those overgrown publishers.

And it's the story of health-care, which saw consolidation in pharmaceuticals leading to mergers among hospitals, who screwed the insurers, who also consolidated.

In every case, it's the workers and the people who rely on them that get the shitty end of the stick. Hotel guests, readers and patients pay more for inferior products. Writers, editors, doctors, nurses, hotel staff and housekeepers get lower pay and worse working-conditions:

https://pluralistic.net/2024/12/18/loose-flapping-ends/#luigi-has-a-point

There is nothing wrong with the idea of an intermediary. Most writers can't publish and sell their own books, and few travelers can navigate finding hotels in strange cities without help. The problem of intermediaries is that when intermediaries gain monopoly power – by buying their rivals and capturing buyers and sellers – they are able to squeeze both. As Tim Wu says, this is the moment when a company that's supposed to be helping becomes a predator, acquires "main character syndrome" and makes every transaction all about the middleman, at the expense of the people buying and selling:

https://pluralistic.net/2026/08/05/absentee-landlord/

There are so many reasons for inflation and the cost of living crisis: wage stagnation, wars of choice in Iran, environmental cataclysm after environmental cataclysm. But under cover of these real factors is a cohort of what Matt Stoller calls "economic termites," parasites that have infested the walls of our economy and are devouring it from within.

You can't solve this by shopping. Calling the hotel direct won't fix it: they have to be on Expedia to survive, and to be on Expedia, they have to sign up for VIP service, and to keep VIP service, they have to make their prices higher everywhere. To fix this, we need systemic action: the corporate death penalty for the companies that are consuming the structural members of our society.

---

Hey look at this (permalink)

• Palantir CTO says some AI researchers are taking up smoking because they expect AI to cure cancer https://www.businessinsider.com/ai-researchers-smoking-ai-cure-cancer-palantir-cto-2026-10

• That time local news rose from the ashes https://www.pressreader.com/canada/toronto-star/20261010/283034061533606

• The ‘American Dream’ Now Costs More Than $5.3 Million https://www.investopedia.com/the-2026-american-dream-cost-rises-4-percent-12154346

• The Militants’ Victory at the UAW https://prospect.org/2026/10/13/militants-victory-uaw-shawn-fain/

• The Cost of Knowledge Accounting Analysis & Profitability Report https://sparcopen.org/our-work/cost-of-knowledge/

---

Object permanence (permalink)

#25yrsago Delta diverts flight after passenger reports praying Hassids as suicidal jihadis https://web.archive.org/web/20011016000622/http://dailynews.yahoo.com/h/nm/20011015/od/delta_dc_1.html

#20yrsago Play Money: memoir of a year selling game-gold https://memex.craphound.com/2006/10/15/play-money-memoir-of-a-year-selling-game-gold/

#15yrsago Cereal Monsters: Frankenberry and friends as Universal classic monsters https://www.deviantart.com/jasonedmiston/art/Cereal-Monsters-106139367

#15yrsago Alabama’s racist “immigration” law creates misery and fear for brown people https://www.theguardian.com/world/2011/oct/14/alabama-immigration-law-families-trapped

#15yrsago Neuroscience explanations are more believable than mere psychological ones https://pmc.ncbi.nlm.nih.gov/articles/PMC2778755/

#15yrsago Writer: “my publisher said I could only get the rights to my out-of-print book back if I bought their leftover copies from them” https://writerbeware.blog/2011/10/18/guest-blog-post-fitzhenry-and-whiteside-writer-beware/

#10yrsago SNL’s Trump/Clinton debate sketch makes Saturday Night great again https://www.youtube.com/watch?v=qVMW_1aZXRk

#10yrsago The pathogens of Wells Fargo’s corruption fester in every large corporation https://www.ineteconomics.org/perspectives/blog/three-things-to-know-to-hold-wells-fargo-accountable

#10yrago Billionaire tech investors back ballot initiative to purge homeless people from San Francisco https://eu.usatoday.com/story/tech/2016/10/14/silicon-valleys-acute-homeless-problem-ballot/91082346/

#10yrsago Game developers say no to DRM: “hurts our customers” https://web.archive.org/web/20161013180206/https://kotaku.com/pc-game-developers-say-anti-piracy-tech-would-make-thei-1787747680

#10yrsago After being outed for massive hack and installing an NSA “rootkit,” Yahoo cancels earnings call https://www.huffingtonpost.co.uk/entry/yahoo-hacking-verizon_n_5800eef7e4b0e8c198a78b14

#5yrsago ROT 8000 and what "security" means https://pluralistic.net/2021/10/15/fargo-north-decoder/#on-trusting-trust

#5yrsago The Chicago Tribune is being murdered before our eyes https://pluralistic.net/2021/10/16/sociopathic-monsters/#all-the-news-thats-fit-to-print

#1yrago The AI that we'll have after AI https://pluralistic.net/2025/10/16/post-ai-ai/#productive-residue

#1yrago Microsoft, Tear Down That Wall! https://pluralistic.net/2025/10/15/freedom-of-movement/#data-dieselgate

---

Upcoming appearances (permalink)

• Paris: Slow Tech Summit, Oct 15
  https://slowtechsummit.com/

• Vancouver: Read, Resist, Repair, Rejoice (Vancouver Writers Festival), Oct 19
  https://writersfest.bc.ca/festival-event-2026/01

• Victoria: Munro's Books, Oct 20
  https://www.munrobooks.com/events/6113620261020

• Vancouver: Life After AI (Vancouver Writers Festival), Oct 22
  https://writersfest.bc.ca/festival-event-2026/46

• Ottawa: Life After AI (Ottawa Writers Festival), Oct 24
  https://writersfestival.org/event/life-after-ai

• Vienna: TED AI, Oct 28-30
  https://tedai-vienna.ted.com/

• Kilkenny (Kilkenomics), Nov 6-8
  https://kilkenomics.com/

• Vancouver: Enshittification (Sid Williams Theatre Society), Nov 10
  https://www.sidwilliamstheatre.com/events/cory-doctorow-talks-enshittification/

• Vancouver: BC Policy Solutions Gala, Nov 12
  https://bcpolicy.ca/gala/

• Oxford: Ministry of the Future, Nov 23
  https://ministryforthefuture.co.uk/events.html

• Sheffield: Reverse Centaur at Juno Books, Nov 25
  https://www.outsavvy.com/event/40274/cory-doctorow-in-conversation

• Oxford: Bennett Oxford Symposium on Open Code in Science, Dec 9
  https://www.bennett.ox.ac.uk/events/2026-bennett-institute-symposium/

• Montreal: World Science Fiction Convention, Sep 2-6
  https://montreal2027.ca/en

---

Recent appearances (permalink)

• Life After AI (Brain Bar)
  https://www.youtube.com/watch?v=IPPa43-n0vI

• Terms of Service with Clare Duffy (CNN)
  https://www.cnn.com/audio/podcasts/terms-of-service-with-clare-duffy/episodes/458ce968-af5d-11f0-b539-13ed2afe25f8

• AI, Work, and Power (Software Engineering Daily)
  AI, Work, and Power https://softwareengineeringdaily.com/podcasts/cory-doctorow-on-ai-work-and-power/

• AI, Corporate Power, and the Fight for Worker Control (Plutopia)
  https://plutopia.io/cory-doctorow-ai-corporate-power-and-the-fight-for-worker-control/

• How to Think About AI—Before It’s Too Late (Daniel Solove)
  https://www.youtube.com/watch?v=_0xR3uEgGcc

---

Latest books (permalink)

• "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026
  https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/

• "Canny Valley": A limited edition collection of the collages I create for Pluralistic, self-published, September 2025 https://pluralistic.net/2025/09/04/illustrious/#chairman-bruce

• "Enshittification: Why Everything Suddenly Got Worse and What to Do About It," Farrar, Straus, Giroux, October 7 2025
  https://us.macmillan.com/books/9780374619329/enshittification/

• "Picks and Shovels": a sequel to "Red Team Blues," about the heroic era of the PC, Tor Books (US), Head of Zeus (UK), February 2025 (https://us.macmillan.com/books/9781250865908/picksandshovels).

• "The Bezzle": a sequel to "Red Team Blues," about prison-tech and other grifts, Tor Books (US), Head of Zeus (UK), February 2024 (thebezzle.org).

• "The Lost Cause:" a solarpunk novel of hope in the climate emergency, Tor Books (US), Head of Zeus (UK), November 2023 (http://lost-cause.org).

• "The Internet Con": A nonfiction book about interoperability and Big Tech (Verso) September 2023 (http://seizethemeansofcomputation.org). Signed copies at Book Soup (https://www.booksoup.com/book/9781804291245).

• "Red Team Blues": "A grabby, compulsive thriller that will leave you knowing more about how the world works than you did before." Tor Books http://redteamblues.com.

• "Chokepoint Capitalism: How to Beat Big Tech, Tame Big Content, and Get Artists Paid, with Rebecca Giblin", on how to unrig the markets for creative labor, Beacon Press/Scribe 2022 https://chokepointcapitalism.com

---

Upcoming books (permalink)

• "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

• "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

• "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2027

• "The Memex Method," Farrar, Straus, Giroux, 2027

---

Colophon (permalink)

Today's top sources:

Currently writing:

• “Once Is Enemy Action,” a science fiction novel about the origins of modern technofascism. Today's words: 508 (25536 total).

• "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Fourth draft completed. Submitted to editor.

• A Little Brother short story about DIY insulin PLANNING

---

This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.

---

How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

\

Today's links

• Bundestrojaner: You can't make people more secure by making them less secure.
• Hey look at this: Delights to delectate.
• Object permanence: 9/11 sitcom; Jon Norman v Philcon; Bruce Sterling's post-9/11 geopolitics; Polaroid bankrupt; David Mamet x Shel Silverstein; "Great Big Beautiful Tomorrow"; Canadian government calls abortion doctors "terrorists"; Shanghai Ikea kicks out lonely, loitering seniors; Black Panther self-care.
• Upcoming appearances: Paris, Vancouver, Victoria, Ottawa, Vienna, Kilkenny, Oxford, Sheffield, Oxford, Montreal.
• Recent appearances: Where I've been.
• Latest books: You keep readin' em, I'll keep writin' 'em.
• Upcoming books: Like I said, I'll keep writin' 'em.
• Colophon: All the rest.

---

Bundestrojaner (permalink)

Every morning, I revisit my blog headlines from this date, going back 25 years, 20 years, 15 years, 10 years, 5 years, and one year. I publish the most interesting ones in a section of my newsletter that I call "object permanence," and I think it's the most useful part of my day.

"Object permanence," of course, is a reference to the stage in an infant's development when they acquire the ability to connect events in the past to events in the present, which is why it's the point at which babies cease to be amazed by peek-a-boo. I've been blogging for more than a quarter century, and these daily trawls through the things I considered important enough to share are an unexpectedly powerful way to connect the events of the past to the events of the present.

Take cybersecurity, a subject that is filling today's headlines, primarily due to a spate of poorly understood (and criminally poorly explained) incidents in which AI companies' hacking tools broke into various servers on the internet, sometimes trashing them:

https://pluralistic.net/2026/09/12/god-in-the-box/#llms-are-fake

In my discussions of this subject, I've been at pains to tease apart two different aspects of these incidents: first, that it's wrong to speak of bots "going rogue" here (they're doing what they're designed to do); but second, that the alarming thing about these incidents is that they illustrate how deeply unserious our approach to information security has been, and remains.

This is important context, and context is what gives us the object permanence we need to both understand and address real problems, like the two related facts that a) our IT systems are poorly constructed and indifferently maintained; and b) the people who are supposed to be fixing this keep making it worse.

The worst culprits here are governments, though the private sector is also terrible (in truth, our cybersecurity nightmare is something of a private-public partnership from hell). Governments are deeply compromised when it comes to digital security because they have an irreconcilable conflict of interest: on the one hand, they want to defend their countries' administrative systems, firms and households from digital attacks. But on the other hand, they really want to be able to launch attacks on their adversaries, both foreign and domestic.

Worse: because governments don't know who those adversaries might be (or might become at some later date), the state security apparatuses of the world's governments keep insisting that all working computer security must be dismantled, so they can spy on all of us in order to figure out whom among us is a Bad Guy, and then "travel back in time" through each newly discovered "bad guy's" communications to identify their confederates and detail their nefarious plots.

This is an old, old, old fight. It was arguably the first policy fight of the digital era: the fight over whether we could have working encryption at all. Old hands call this era "the crypto wars" (from when "crypto" meant "cryptography"), when the NSA classed working encryption code as a "munition" and criminalized civilian access to it. That was a very hard-fought fight, and it was won decisively by the Electronic Frontier Foundation and our just-retired executive director Cindy Cohn, who, as a young lawyer, litigated the "Bernstein case" that established that code was a form of expressive speech protected by the First Amendment. If you're interested in learning more about this, you should read Cindy's newly published memoir, Privacy's Defender (all profits go to EFF):

https://mitpress.mit.edu/9780262051248/privacys-defender/

Before Cindy came on the scene, the crypto wars were being fought primarily by the "cypherpunks," a motley gang of computer security enthusiasts of many political stripes who were unified by their conviction that the most important aspect of security was defensive. The fact that the NSA wanted to be able to read the private messages and files of their adversaries (the "Four Horsemen of the Infocalypse": terrorists, drug traffickers, child pornographers and organized crime) must not be allowed to trump the fact that any encryption that the NSA could pierce could also be pierced by bad guys: corporate spies, state-sponsored spies, griefers, petty criminals, stalkers, identity thieves and other creeps.

This argument was so indisputable, it's a tautology: "You cannot make a computer user more secure by making their computers less secure." We don't know how to make a computer that only "good guys" can break into, but which "bad guys" bounce off of. Either we make computers more secure, or we don't.

We didn't.

In the decades since the crypto wars, governments have embarked upon an uninterrupted program to weaken the security of our computers, with catastrophic effect. The most spectacular example is unquestionably the spy agencies' doctrine called "NOBUS," which stands for "no one but us"; as in "No one but us is smart enough to find this bug, which means that we can withhold its discovery from the manufacturer, which will allow us to weaponize this bug and use it to attack our enemies. Because no one but us is smart enough to find this bug, none of those enemies will ever discover it, weaponize it, and use it to attack the people who pay our salaries, who expect us to keep them safe."

This turns out to be both catastrophically wrong and catastrophically dangerous. A series of leaks of computer vulnerabilities hoarded by both the NSA and CIA under NOBUS confirmed that these bugs were independently rediscovered by criminals and state actors at the rate of about 20% per year. Worse, though, is that these bugs don't need to be independently rediscovered, because the NSA and CIA both leaked them.

The highest-profile leak was an NSA-hoarded vulnerability in Windows they codenamed "Eternal Blue." Eternal Blue leaked in 2017, whereupon cybercriminals hybridized it with some otherwise undistinguished ransomware to create Wannacry, a devastating piece of malware that took down hospitals, banks and oil pipelines, as well as the entire city government of Baltimore and the British Library:

https://cdn.sanity.io/files/v5dwkion/production/99206a2d1e9f07b35712b78f7d75fbb09560c08d.pdf

But NOBUS isn't the only example of spy agencies making our computers less secure in the name of making us more secure. Perhaps the most egregious example of that are the Bundestrojaners, malicious software purchased by the German government, whose customs agents secretly installed it on the computers of unsuspecting people during border inspections. This "lawful interception" software was hugely invasive: it could grab your screen, plunder your hard drive, and install and execute software on your computer, all with the utmost stealth, intended to keep you from knowing it was installed and operating on your computer. But it wasn't merely invasive – it was insecure, so anyone (rival spies, criminals, stalkers) could scan the internet for infected computers and take them over:

https://www.ccc.de/en/updates/2011/staatstrojaner

You really couldn't ask for a more perfect example of the maxim that you can't make computer users more secure by making their computers less secure. Despite this, governments continue to demand the introduction of grave, universal secure vulnerabilities into our digital lives. Take "chat control," a proposal to force every device manufacturer to install software that continuously scans your devices for child sex abuse material (AKA "child porn"):

https://www.eff.org/deeplinks/2026/04/eu-parliament-blocks-mass-scanning-our-chats-whats-next

There are plenty of things wrong with this, starting with the fact that it requires your device to secretly grab and transmit sensitive images from your phone, which might include sensitive images of your kids that were requested by their doctors. This isn't a hypothetical: it's something that happened to a dad who subsequently lost his email, his login to every other account, his phone number, all of his files (including his tax records and his business data), and every photo he had ever taken of his family, without appeal, after Google automatically detected a photo he took of his son to send to the family pediatrician. Google also falsely accused this man of sexually abusing his child and sicced the SFPD on him:

https://pluralistic.net/2022/08/22/allopathic-risk/#snitches-get-stitches

But even if you're not worried about this, you should still have the object permanence to recall the lessons of NOBUS and the Bundestrojaner. We can't make computer users more secure by making their computers less secure, and it's hard to imagine something more insecure than a computer that you entrust with every sensitive detail of your life that is designed to run computer code in secret that you can neither inspect nor terminate (let alone delete).

Hardly a day goes by without some country demanding that your computer's security be weakened in the name of protecting you. For years, both Conservative and Labour UK governments have been steaming towards a total ban on working encryption in the name of catching bad guys:

https://pluralistic.net/2023/03/05/theyre-still-trying-to-ban-cryptography/

It's happening in Canada, too, where somehow "digital sovereignty" means "making every device used in Canada vulnerable to foreign spies so that our own spies can access our private communications":

https://www.eff.org/deeplinks/2026/05/canadas-bill-c-22-repackaged-version-last-years-surveillance-nightmare

Then there's the "age verification" laws proliferating all around the world. Remember, there's no such thing as "age verification," there's only "spying on everyone, all the time, to figure out who the kids are":

https://pluralistic.net/2026/06/23/destroy-the-village/#to-save-it

Age verification requires multiple entities to assemble vast corpuses of the kinds of sensitive identification papers that would allow identity thieves to destroy the finances and lives of everyone in the country, and (as foretold) every time it's tried, these files leak. Someday, this will lead to doxing whole countries:

https://arstechnica.com/tech-policy/2026/02/discord-faces-backlash-over-age-checks-after-data-breach-exposed-70000-ids/

Age verification is the latest and worst stage in governments' fraught relationship with private sector data-collection. The USA is the worst offender here: it is the largest, richest country in the world that has essentially no privacy protections. The last time the US updated its federal privacy law was in 1988, when the Video Privacy Protection Act banned the disclosure of your VHS rentals. Tech companies spy on you for the same reason your dog licks its balls – because they can, and no one stops them:

https://pluralistic.net/2026/03/10/ice-tech/#foreseeable-outcomes

Which raises an obvious question: why hasn't Congress updated privacy law? And why hasn't the EU figured out how to force the US companies that pretend to be Irish to obey European privacy law? The answer is that governments love private sector data-collection, because it gives them a cheap, off-the-books source of warrantless access to information they aren't legally allowed to acquire:

https://pluralistic.net/2021/04/13/public-interest-pharma/#axciom

From Flock cameras to ICE's use of Google data in its ethnic cleansing campaign, the US government and the commercial surveillance industry have created a public-private partnership from hell, where governments refuse to block commercial spying and companies hand their commercial surveillance data over to governments in return.

From there, it was a short leap to governments insisting that the private sector gather our data. That's the right way to think about age verification, chat control, and other mandates for corporations to spy on us using our devices and our accounts: a government requirement for private-sector mass surveillance.

I have plenty of hostility to corporate overreach, but to have any hope of fighting that overreach, we need governments to be on our side. But for our governments, when it comes to cybersecurity, we are the enemy, and spying corporations are our governments' allies.

Sometimes, that's utterly, literally true. Governments around the world are addicted to buying spyware from cyber-arms dealers, mostly headquartered in Israel and the UAE (with the odd Italian and British company for variety). These arms-dealers practice NOBUS-by-proxy, wherein they discover or pay bounties for bugs in widely used hardware, operating systems and applications and – rather than reporting them to the manufacturer – hoard them and weaponize them, and then sell the weapons to criminals, corporations, and our governments, who give them billions of our money to ensure that our computers have huge, glaring defects in them that leave us terribly vulnerable:

https://citizenlab.ca/focus-area/targeted-surveillance/

In a world where our governments' national security apparatuses were genuinely committed to our safety and security, they would criminally prosecute these companies, not make their owners into billionaires.

This is the context we should all be thinking about when it comes to these "rogue AI hacking agents." The IT systems that these irresponsibly deployed software products have trashed were already terrifyingly vulnerable…by design. Rather than fix these systems, our governmental "security" agencies have spent the past 40 years making them less secure, in order to make it easier for them to catch "bad guys," who now find it trivial to attack us through systems we are all totally reliant upon.

In every way, in every area of law, governments fail to take our security seriously. That even includes copyright law. All over the world, the US Trade Representative has ensured that every country has an "anti-circumvention" law that makes it a crime to reverse-engineer and modify software without permission:

https://pluralistic.net/2026/01/01/39c3/#the-new-coalition

From the very start, these have been a security nightmare. Remember the "Sony Rootkit?" Between 2005-2007, Sony-BMG Music distributed over 6m CDs that were deliberately infected with a piece of malicious software called a "rootkit" that was used to disable your computer's ability to rip (copy) music CDs.

The way this rootkit did so was depraved in its indifference to the security of Sony-BMG's customers: at the same time as Sony-BMG's malware installed its secret anti-ripping program, it also altered their computers' operating systems to make them incapable of detecting any program or file whose name started with $SYS$. Immediately, malicious software authors started adding $SYS$ to the start of all their filenames, and that malicious software was therefore undetectable to millions of users' computers. It was even invisible to anti-virus software. Worse: Sony-BMG's rootkit infected 200,000-300,000 US government and military networks:

https://www.schneier.com/blog/archives/2005/11/sonys_drm_rootk.html

Even worse: after the scandal broke, security researchers all over the world came forward to say that they'd discovered the Sony Rootkit months before it became common knowledge, but their lawyers had told them they weren't allowed to disclose its existence because doing so would fall afoul of anti-circumvention law. For months, this official, deliberate malware epidemic spread in secret because of anti-circumvention law.

It's been more than 20 years since the Sony Rootkit, and anti-circumvention law is now worse than it was in the oughts: now it applies to far more devices from far more vendors. Today, it's common for corporations to threaten their own customers with civil and criminal liability if they have the temerity to hire outside auditors to evaluate the software they entrust their businesses to for security defects. And oh God, it's even worse, because the worst offender is Oracle, who are now the de facto IT czars of America:

https://arstechnica.com/information-technology/2015/08/oracle-security-chief-to-customers-stop-checking-our-code-for-vulnerabilities/

I'm not saying that these are the only problems with our IT security. What I am saying is that the hacking bots everyone's freaking out about didn't appear out of nowhere. If you have just a little object permanence, you can see that they are the terminal stage of a pathology that governments have only ever worsened: by hoarding and weaponizing vulnerabilities; by paying others to hoard and weaponize vulnerabilities; by criminalizing security audits; by insisting that every computer we rely on be equipped with deliberate vulnerabilities in software we can't inspect, terminate or delete.

Yeah, there should be criminal and civil liability for OpenAI, Amazon, Anthropic and every other company whose bots "went rogue" and attacked servers. But that will do nothing to fix our IT.

The table-stakes for a secure digital world are: public agencies that try to make our computers as secure as possible, including by administering the corporate death-penalty to any company that hoards and weaponizes information about bugs in our computer. We should protect and reward individuals and firms who come forward with true disclosures about bugs in systems we rely upon. We should not give companies the right to silence and punish those critics who want to warn us about their defective products. And we should not require that companies make us less secure in the name of making it easier for spies and cops to catch the bad guys.

(Image: Pmk58, CC BY-SA 4.0; Wikipedian Prolific, CC BY-SA 3.0; modified)

---

Hey look at this (permalink)

• Inside The Failed Fight To Unionize One Of Gaming’s Most Idealized Studios https://kotaku.com/inside-the-failed-fight-to-unionize-one-of-gamings-most-idealized-studios-2000742755

• How Trump Enforcers are Sabotaging Efforts to Bring Down Drug Prices https://www.thebignewsletter.com/p/how-pharma-middlemen-turned-the-federal

• How Porter, Newsom, and so many others are wrong about Proposition 40 https://48hills.org/2026/10/who-porter-newsom-and-so-many-others-are-wrong-about-proposition-40/

• Raspberry Pi puts digital handcuffs on RAM upgrades https://www.fsf.org/blogs/community/2026-raspberry-pi

• We Infiltrated a Police Union Convention in Las Vegas https://www.hamiltonnolan.com/p/we-infiltrated-a-police-union-convention

---

Object permanence (permalink)

#25yrsago CBS sitcom about couple who meet in the WTC rubble https://web.archive.org/web/20011014082646/http://dailynews.yahoo.com/h/eo/20011012/en/cbs_considers_wtc_comedy_1.html

#25yrsago Jon Norman not invited to Philcon https://www.locusmag.com/2001/Departments/Letters10Norman.html

#25yrsago Bruce Sterling's post-9/11 geopolitics predictions https://web.archive.org/web/20011102212150/https://www.edge.org/documents/whatnow/whatnow_sterling.html

#25yrsago Polaroid files Chapter 11 https://web.archive.org/web/20011107181428/http://www.polaroid.com/polinfo/press_releases/october01/101201a.html

#25yrsago David Mamet's tribute to Shel Silverstein https://www.nytimes.com/2001/10/14/theater/theater-a-beloved-friend-who-lived-life-the-chicago-way.html

#15yrago Great Big Beautiful Tomorrow: a chapbook in PM Press’s Outspoken Authors series https://craphound.com/category/gbbt/

#15yrsago Canadian government advice defines abortionists as terrorists https://www.jezebel.com/canadian-government-lists-abortionists-as-terrorists-u-5849963

#10yrsago Ikea Shanghai to elderly, lonely Chinese people: buy something or get out https://qz.com/806990/lonely-shanghai-seniors-now-have-to-buy-something-if-they-want-to-cruise-all-day-in-ikeas-cafeteria

#5yrsago Facebook shows mall ninja gear ads on insurrection articles https://pluralistic.net/2021/01/14/10-point-program/#monetizing

#5yrsago The Black Panther self-care method https://pluralistic.net/2021/01/14/10-point-program/#panthers

---

Upcoming appearances (permalink)

• Paris: Slow Tech Summit, Oct 15
  https://slowtechsummit.com/

• Vancouver: Read, Resist, Repair, Rejoice (Vancouver Writers Festival), Oct 19
  https://writersfest.bc.ca/festival-event-2026/01

• Victoria: Munro's Books, Oct 20
  https://www.munrobooks.com/events/6113620261020

• Vancouver: Life After AI (Vancouver Writers Festival), Oct 22
  https://writersfest.bc.ca/festival-event-2026/46

• Ottawa: Life After AI (Ottawa Writers Festival), Oct 24
  https://writersfestival.org/event/life-after-ai

• Vienna: TED AI, Oct 28-30
  https://tedai-vienna.ted.com/

• Kilkenny (Kilkenomics), Nov 6-8
  https://kilkenomics.com/

• Vancouver: Enshittification (Sid Williams Theatre Society), Nov 10
  https://www.sidwilliamstheatre.com/events/cory-doctorow-talks-enshittification/

• Vancouver: BC Policy Solutions Gala, Nov 12
  https://bcpolicy.ca/gala/

• Oxford: Ministry of the Future, Nov 23
  https://ministryforthefuture.co.uk/events.html

• Sheffield: Reverse Centaur at Juno Books, Nov 25
  https://www.outsavvy.com/event/40274/cory-doctorow-in-conversation

• Oxford: Bennett Oxford Symposium on Open Code in Science, Dec 9
  https://www.bennett.ox.ac.uk/events/2026-bennett-institute-symposium/

• Montreal: World Science Fiction Convention, Sep 2-6
  https://montreal2027.ca/en

---

Recent appearances (permalink)

• Terms of Service with Clare Duffy (CNN)
  https://www.cnn.com/audio/podcasts/terms-of-service-with-clare-duffy/episodes/458ce968-af5d-11f0-b539-13ed2afe25f8

• AI, Work, and Power (Software Engineering Daily)
  AI, Work, and Power https://softwareengineeringdaily.com/podcasts/cory-doctorow-on-ai-work-and-power/

• AI, Corporate Power, and the Fight for Worker Control (Plutopia)
  https://plutopia.io/cory-doctorow-ai-corporate-power-and-the-fight-for-worker-control/

• How to Think About AI—Before It’s Too Late (Daniel Solove)
  https://www.youtube.com/watch?v=_0xR3uEgGcc

• Could Tech Bosses Destroy Life As We Know It? (Politics JOE)
  https://www.youtube.com/watch?v=PL4VktU0SgY

---

Latest books (permalink)

• "The Reverse-Centaur's Guide to AI," a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026
  https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/

• "Canny Valley": A limited edition collection of the collages I create for Pluralistic, self-published, September 2025 https://pluralistic.net/2025/09/04/illustrious/#chairman-bruce

• "Enshittification: Why Everything Suddenly Got Worse and What to Do About It," Farrar, Straus, Giroux, October 7 2025
  https://us.macmillan.com/books/9780374619329/enshittification/

• "Picks and Shovels": a sequel to "Red Team Blues," about the heroic era of the PC, Tor Books (US), Head of Zeus (UK), February 2025 (https://us.macmillan.com/books/9781250865908/picksandshovels).

• "The Bezzle": a sequel to "Red Team Blues," about prison-tech and other grifts, Tor Books (US), Head of Zeus (UK), February 2024 (thebezzle.org).

• "The Lost Cause:" a solarpunk novel of hope in the climate emergency, Tor Books (US), Head of Zeus (UK), November 2023 (http://lost-cause.org).

• "The Internet Con": A nonfiction book about interoperability and Big Tech (Verso) September 2023 (http://seizethemeansofcomputation.org). Signed copies at Book Soup (https://www.booksoup.com/book/9781804291245).

• "Red Team Blues": "A grabby, compulsive thriller that will leave you knowing more about how the world works than you did before." Tor Books http://redteamblues.com.

• "Chokepoint Capitalism: How to Beat Big Tech, Tame Big Content, and Get Artists Paid, with Rebecca Giblin", on how to unrig the markets for creative labor, Beacon Press/Scribe 2022 https://chokepointcapitalism.com

---

Upcoming books (permalink)

• "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

• "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

• "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2027

• "The Memex Method," Farrar, Straus, Giroux, 2027

---

Colophon (permalink)

Today's top sources:

Currently writing:

• “Once Is Enemy Action,” a science fiction novel about the origins of modern technofascism. Today's words: 574 (7730 total).

• "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Fourth draft completed. Submitted to editor.

• A Little Brother short story about DIY insulin PLANNING

---

This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.

---

How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X