We (all tech people everywhere me included) argued for a lot of time for free speech on the internet, but the result currently is that we built a system that is free speech for Russian and Chinese bots and actors. In Europe we are under daily attack from Russian accounts that spread massive amounts of desinformation, deep fakes, just emotional appeals with the goal of destroying liberal democracy. The US government is actively trying to support them by fighting against any kind of European rules and spreading their part of desinformation.
This is not about normal politics, Europe is under siege.
Yet we are increasingly binding ourselves (and even “authorized” bots) in chains of verified identity, deliberately suppressing anonymity. Imposing a “zero-trust” architecture on society inevitably leads to totalitarianism.
The right to express ideas without personal attribution has always been a cornerstone of free speech and a free society. It is now being redefined and demonized as mere “bot activity.” While real bots certainly exist (as they have since the days of spam) many accounts labeled as bots are simply human beings who choose anonymity because they hold controversial opinions they do not wish to have traced back to them.
Companies like Cloudflare are among the leaders in this shift by building frameworks ostensibly to monetize AI bot traffic. The consequence, however, is the effective end of online anonymity. When anonymity is forbidden, freedom itself disappears.
First I thought CVE-2012-3587 was incompetence... but then seeing CVE-2012-0954 after it, I couldn't help think something more was at bay as something connected to a nation state. It does not surprise me in the least to see nation state attackers exploiting N++. Because I've also on very sensitive enterprise PAM systems in F500/research/academia, and about 10% of the time it felt like I'd see Notepad++ on internet-connected systems used for security tooling because vanilla notepad is indeed garbage. It does not surprise me at all this has been used as an attack vector.