Skip to content
wiki.fftac.org

Virtual Pages - Source Excerpt 05

Back to Virtual Pages

Summary

This source excerpt preserves a bounded section of 2IA.org/wp-content/themes/twoia-intelligence/inc/virtual-pages.php so readers can inspect the evidence without opening the full source file.

**Source path:** 2IA.org/wp-content/themes/twoia-intelligence/inc/virtual-pages.php

'body'  => 'Connecting a handle, face, device, address, or voice to a legal identity can affect work, housing, family, safety, protest, reputation, and speech. Require high confidence and a narrow purpose.',
				),
				array(
					'title' => 'Demand The Least-Exposure Rule',
					'body'  => 'Before forced exposure, ask whether the institution can use pseudonymous access, partial verification, time-limited checks, stronger deletion, human appeal, or a less invasive proof path.',
				),
			),
		),
		'surveillance-systems' => array(
			'summary' => 'Surveillance becomes real through architecture: data sources, access roles, retention defaults, vendor terms, renewal dates, and logs.',
			'sections' => array(
				array(
					'title' => 'Inventory First',
					'body'  => 'A community cannot govern tools it cannot name. Build an inventory of cameras, readers, sensors, databases, monitoring software, broker feeds, analytics tools, and vendor portals.',
				),
				array(
					'title' => 'Procurement Is Policy',
					'body'  => 'Contracts show what speeches hide: data rights, audit access, renewal traps, subcontractors, accuracy claims, training obligations, deletion duties, and termination clauses.',
				),
				array(
					'title' => 'Follow The Data Flow',
					'body'  => 'Ask what enters, who can query it, what is shared, what is retained, what is deleted, what vendors can see, and what happens when data is wrong.',
				),
				array(
					'title' => 'Logs Or It Did Not Happen',
					'body'  => 'Access logs, purpose codes, supervisor approvals, export logs, model versions, deletion records, and misuse discipline are the difference between governance and trust-me surveillance.',
				),
			),
		),
		'open-source-intelligence' => array(
			'summary' => 'Responsible OSINT starts with a public-interest question, not a person to chase. It ends with source notes, minimization, and a correction route.',
			'sections' => array(
				array(
					'title' => 'Purpose Controls The Search',
					'body'  => 'Define the public issue first: policy, procurement, violence, censorship, corruption, exploitation, data misuse, or public claims. The purpose decides what to collect and what to ignore.',
				),
				array(
					'title' => 'Primary Records Beat Viral Claims',
					'body'  => 'Use budgets, filings, court dockets, minutes, contracts, official datasets, archived pages, photos with context, and direct statements. Label everything else as reporting, analysis, allegation, or inference.',
				),
				array(
					'title' => 'Publish The Minimum',
					'body'  => 'The strongest OSINT work proves the public point while cutting private people, addresses, minors, victims, unrelated identifiers, and spectacle that adds risk but not evidence.',
				),
				array(
					'title' => 'Make It Repeatable',
					'body'  => 'Record source, date seen, archive status, confidence, uncertainty, transformation, redaction choice, and what would change the finding.',
				),
			),
		),
		'anonymous-hacktivist-collective' => array(
			'summary' => 'Anonymous is best understood as a contested symbol and attribution problem, not a stable institution or a permission slip.',
			'sections' => array(
				array(
					'title' => 'A Symbol Is Not A Membership List',
					'body'  => 'Different actors can claim the name. Analysis should separate symbol, statement, evidence, action, motive, and verified responsibility.',
				),
				array(
					'title' => 'Attribution Needs Labels',
					'body'  => 'Use labels like claimed, corroborated, disputed, spoofed, parody, unknown, or confirmed. A mask, video, handle, or leak brand is not proof by itself.',
				),
				array(
					'title' => 'Dissent Does Not Need Intrusion',
					'body'  => 'Lawful protest, journalism, satire, public records, litigation support, and public comment can confront power without teaching attacks, leaks, doxxing, evasion, or disruption.',
				),
				array(
					'title' => 'Study The Media Effect',
					'body'  => 'A claimed operation can shape belief before facts land. Slow down, check evidence, identify who benefits, and avoid turning spectacle into certainty.',
				),
			),
		),
		'psychological-warfare' => array(
			'summary' => 'Influence operations work by controlling attention, emotion, repetition, identity threat, and uncertainty. The defense is provenance and calm verification.',
			'sections' => array(
				array(
					'title' => 'Name The Frame',
					'body'  => 'Ask what the message wants people to fear, blame, repeat, ignore, surrender, or join. Frame analysis is not censorship; it is evidence hygiene.',
				),
				array(
					'title' => 'Provenance Before Outrage',
					'body'  => 'Check origin, first amplifier, edits, missing context, primary evidence, financial or political interest, and what source would change the conclusion.',
				),
				array(
					'title' => 'Synthetic Media Raises The Bar',
					'body'  => 'Generated images, cloned voices, fake screenshots, and automated text make labels, originals, timestamps, chain of custody, and correction habits more important.',
				),
				array(
					'title' => 'Resilience Beats Panic',
					'body'  => 'Better defenses are transparency, source diversity, public correction, media literacy, ad libraries, bot labels, independent review, and algorithmic audits, not broad permission for unaccountable speech control.',
				),
			),
		),
		'metadata-is-identity' => array(
			'summary' => 'Metadata is not harmless exhaust. At scale it becomes a relationship map, movement history, belief signal, and vulnerability profile.',
			'sections' => array(
				array(
					'title' => 'Thin Facts Make Thick Portraits',
					'body'  => 'Timestamps, contacts, routes, devices, payments, IPs, location pings, account links, and service logs can reveal worship, organizing, health, work, romance, legal help, and distress.',
				),
				array(
					'title' => 'Third Parties Hold The Map',
					'body'  => 'Phone companies, platforms, apps, ad networks, payment processors, data brokers, landlords, schools, and vendors may hold pieces of the profile. Access through third parties still affects people.',
				),
				array(
					'title' => 'Aggregation Changes The Harm',
					'body'  => 'One record can be ordinary. A year of records can become intimate. Protection should increase as records are linked, shared, retained, and queried across systems.',
				),
				array(
					'title' => 'Ask For The Retention Clock',
					'body'  => 'Request retention schedules, deletion rules, access-control policies, broker contracts, sharing agreements, audit logs, and stale-data correction procedures.',
				),
			),
		),
		'ai-surveillance' => array(
			'summary' => 'AI surveillance turns ambiguity into rankings, clusters, summaries, risk scores, matches, and flags. Each output needs proof, review, and appeal.',
			'sections' => array(
				array(
					'title' => 'A Score Is A Claim',
					'body'  => 'Model output is not truth. It is a claim produced from data, assumptions, thresholds, prompts, training limits, and deployment choices. Demand documentation before action.',
				),
				array(
					'title' => 'Validate Against Real Harm',
					'body'  => 'Ask who gets false positives, whose dialect or neighborhood is misread, what protected activity is chilled, what error rate applies, and whether benefits justify burdens.',
				),
				array(
					'title' => 'Human Review Must Have Power',
					'body'  => 'A reviewer needs source access, time, authority to disagree, documented reasons, override power, and a duty to correct downstream records.',
				),
				array(
					'title' => 'Procurement Questions',
					'body'  => 'Request model purpose, data sources, validation reports, bias assessments, human-review rules, audit rights, retention terms, appeal policy, vendor lock-in, and termination rights.',
				),
			),
		),
		'keyword-monitoring' => array(
			'summary' => 'Keyword monitoring is triage at most. Words without speaker, purpose, audience, and context are a weak basis for judgment.',
			'sections' => array(
				array(
					'title' => 'Words Are Not Intent',
					'body'  => 'A term can appear in reporting, study, fiction, prayer, protest, quotation, grief, criticism, translation, or satire. Review has to ask what the speech is doing.',
				),
				array(
					'title' => 'Do Not Publish Trigger Lists',
					'body'  => '2IA explains governance, review, context, error, and redress. It does not publish lists or tuning guidance meant to test, trip, evade, or game monitoring systems.',
				),
				array(
					'title' => 'Flags Need Expiration',
					'body'  => 'If language creates a flag, the flag needs context review, protected-activity review, retention limits, deletion rules, and a route to correction.',
				),
				array(
					'title' => 'Ask For Review Rules',