Resident of the world, traveling the road of life
69734 stories
·
22 followers

The Art of Showing Up and Happy Accidents: Charlie May on three decades of electronic music

1 Share
 

Charlie May Live at the Barbican for Sasha’s Refracted Tour

Few artists have left as significant a mark on electronic music as Charlie May. From the formative days of UK electronic music as one half of Spooky, to his longstanding creative partnership with Sasha and his pivotal role in records such as Xpander, to his releases here on ASIP as part of Quiet Places. Charlie has been responsible for some of the genre's most significant moments - and many of my own personal favorites.

Charlie’s latest album here on ASIP, Trusted Farms, provides us with yet another small glimpse into his beautiful mind. The album marks his first solo album on vinyl, bringing together a collection of beatless compositions, some of which have been quietly taking shape for more than a decade. Trusted Farms reveals the melodic instincts, experimentation and unmistakable production touch that have defined his work for so many years, boiled down into a succinct and emotionally charged 12”.

Getting to know Charlie through this release, there's a certain humility that feels increasingly rare; an artist responsible for some of electronic music's most celebrated moments, yet one who has always seemed perfectly content to remain behind the scenes, letting the music speak for itself.

It's therefore a real pleasure to bring Charlie into the spotlight for a small moment, and share the words, stories and insights of someone who has been such an inspiration to us over the years.

ASIP: I wanted to start at the start… with Spooky. But I don’t think there’s much detail before then out in the world. So, who was Charlie May before Spooky?

Charlie May: Duncan and I grew up together so we had been mucking about in bands for years prior to forming Spooky. Obviously the arrival of acid house had a huge impact on us. I had always been into music, taping things off the radio. Singing in school choirs. I learned the piano from age 4 and started improvising and making my own music soon after. I used to mess about with 2 cassette decks, recording between them and overdubbing parts. I still find that process fascinating - the way that two or more musical parts or sounds combine.

One reason I got into music in a big way was due to being sent away to boarding school when I was eight - music was a big part of the curriculum but also an escape. This is a long time ago before the advent of even the Sony Walkman. I still remember the first time I put on a pair of headphones and heard stereo sound. It blew my mind. Truly a transcendent experience. So I heard and performed quite a lot of choral and classical music, often in spaces with great acoustics. Now i just dial up a plug-in to get the same effect. Every bit of free time I had I would sneak off to the music rooms and mess about on the piano. Eventually forming bands which was frowned upon in those days. I still feel a sense of rebellion going into the studio to make music. I aspire to upset grown-ups to this day.

When people talk about early Spooky now, there’s inevitably a historical importance attached to it. An evolving scene/genre, defining albums and remixes that I’m still digging out of old compilations today. How would you best describe this time of your life and your fondest memories?

We were extremely blessed to have been a part of the early wave of house and techno in the UK. Right when the technology became affordable enough to make records at home. It was a diy punk ethic. So many factors came together to create this highly vibrant and creative scene. It was certainly heady and I remember being carried along by the collective energy. We worked hard at it but it wasn’t really work. So much talent was concentrated into this small scene which spread all over the world. Looking back it seems dreamlike. Being young meant having the energy and stamina to go the distance too, so 3 day studio sessions with little sleep were completely fine. There was no hard disk recording, no mobile phones and no internet. Yet this futuristic music was everywhere. It was in many ways far simpler than today. At the time I thought it would last forever and in some ways that has turned out to be true. I certainly enjoy making music as much if not more today. Everything changes subtly and then one day you look back and think ‘how did that all happen’ ? It was a blast for sure. I try not to forget how pure and uplifting those times were, also a bit rough around the edges. Unlike today it felt truly anarchic, there was no one in charge telling you what you could or could not do or say.

You’ve made a return with Duncan lately, and a new album this year titled Lucent, as well as energy around remix EPs from the likes of Alex Kassian. I think many Charlie May fans will know you have been busy behind the scenes and probably never stopped creating music for many years now, but what spurred this desire lately to put out new releases?

Pure coincidence really - it just happens that way sometimes. Both Duncan and I have been doing our own thing as well as occasional Spooky tracks for years. He has his label 49 North and various collaborative projects. I put out quite a few releases on Bandcamp as well as doing remixes. Writing mainly. I try and write some music every day.

How much do you allow the history of Spooky into the room? Are the old records useful reference points, or are they something you deliberately avoid looking towards?

It’s great that as time goes on the early tunes get new leases of life through a younger audience and dj’s discovering them or through remixes / re releases. It’s important to curate the story and protect what happened when. Other than that we don’t dwell on the past. I always want to try something new in the studio - see where it leads. Electronic music is truly boundless and that sense of anything is possible is a reason to continually move onto fresh turf.

One of the things I’m sure took up a bunch of your time was Sasha’s Refracted tour. I wanted to first say, the recording of that at the Barbican, and the live video is, to me, a defining moment in electronic music. I was gutted to not see it live, but living vicariously through the recordings is enough to give me goosebumps each time. Reflecting back on this and your key role within it all, how do you feel about it now you’ve had a few years away from it?

It was quite an experience for all of us - especially for a bunch of studio rats not used to performing live. It was tough going at times but because of the people involved we managed to produce something special I think. I loved the shows and would jump at the chance to do something similar again. When it all comes together and the music finally gets played to an audience there’s a welcome sense of completion. But we were blessed to be a great team of people. I think that’s the most important ingredient.

Can you tell us a bit about the process of reconstructing dance music for this type of setting? And why you think it worked so well?

We took the approach that there were to be no laptops or computers on stage - so everything had to be played with hardware or real instruments. Which is obviously quite a tough route to take but it paid off in the end. The whole show was painstakingly built from the ground up. It took a while and there were constant changes and adjustments. We had to learn new tricks along the way. When you have someone like Barry Jamieson on board who can solve any technical issue, plus a top tier monitor engineer and stage manager to keep law and order it raises the potential of what the collective can achieve considerably.

“I put hours of effort into trying to be a good producer but in the end the best results are graft accidents.”
— Charlie May

I would kick myself for not taking this opportunity to ask you for your story on Xpander. Of course, you were instrumental in the development of that EP, but can you tell us in your own words how it came about and the relationship that developed with Sasha after?

It started life as a track in the Spooky live show when we were touring with Megadog. It was more of a breakbeat vibe but we couldn’t get it to gel in the studio so it got put on the shelf. Fast forward about 5 years and I met up with Sasha who asked if had anything useful lying around that we might work on. I remembered I had this riff on an old DAT tape and played him that. He got very excited and that enthusiasm breathed new life into it. I think the moral of the story is record everything and don’t throw anything away in case someone else has a better idea. After that we just kept working together as we were on the same page. We did Belfunk as a result of messing about with Orbital’s Belfast. You can never really tell how things are going to work out.

There’s a temptation with a record as revered as Xpander to assume everybody involved knew they were making something important. What did it feel like in the room at the time? Was it painstaking, exciting, ordinary, frustrating?

The whole Xpander process stretched out over a period of time. There were a few attempts at mixing it that I remember. Then there was the Wipeout version. We knew it was strong musically but that’s only half the battle. So it was a bit of a rollercoaster. A lot of tracks end up driving you nuts at times. When it was done we knew it was finished. Can’t ask for more than that really.

Do you remember the smallest decision on Xpander that ended up making the biggest difference?

Probably the decision not to go to the boozer / curry house for once and actually continue working instead.

Dennis and Dave of Quiet Places were a part of the Refracted tour playing live alongside you. Is it fair to say that was the early seeds of the Quiet Places project, in so far as you working closer together and understanding each other musically?

For sure - we started Quiet Places as a way to decompress from the punishment of the live shows. It was a natural reaction to want to make new music that was very free floating and unrestricted. Hence we decided on two rules : no grid and no beats. I very much enjoy making those albums -  the process is therapeutic, except for Dennis who has to clean up everyone’s audio mess and make it sound like an actual record.

We know about the formation of Quiet Places and the many whiskey-fuelled jam sessions that spawned those deep trips. I feel like this format of long form albums is really under-appreciated, but for those that get it… they really get it. In today’s ‘Spotify age’ of previews and playlisting, these albums completely buck the trend. What are your thoughts on this approach you’ve undertaken with Quiet Places? Do you see the act of listening to long form more like a chill-out room experience? Or is it the storytelling aspect, through samples etc?

A record like that can function in different ways - as a backdrop to some other activity or post club winding down. Or it can be music to drift off to. Or taken in its entirety as a story, like a movie.

I have recently trained myself to sit down and listen to albums from beginning to end without pause or distraction. It has to be played on a quality system, then your brain receives every detail and nuance. It’s a very different experience that ends up being transcendent and nourishing. We have become accustomed to skimming over the surface of a rich culture and missing out on so much.

A 40 minute album can literally change your life for the better if given the appropriate attention.

Charlie May live at the Barbican for Sasha’s Refracted Tour

In the Trusted Farms album notes, we talk about you being great at writing short phrases and riffs that become inseparable from the track around them. And the evidence out in the world is clear that you’re brilliant at it. Where does that instinct come from — playing, repetition, sound choice, classical training, experimentation, or simply knowing when you’ve stumbled onto something?

Making any art is mud slinging, then clearing away what isn’t necessary until you like it. Then sling some more mud. I put hours of effort into trying to be a good producer but in the end the best results are graft accidents. I do think those chance events and the chances of them occurring are increased by showing up regularly. Also breaking old habits and getting out of your own way. Having lots of ideas is great but that’s a long way from a finished record. I like finishing records but that’s also the part I find challenging and have to have a little bit of luck go into the mix. Also I make heaps of crap - masses of it. That doesn’t matter. Some of the best results start off as rubbish.

You have said in the album notes that working alone is only possible because of the collaborations you’ve been involved with. Who taught you something in the studio that permanently changed the way you work?

Everyone I’ve worked with has taught me something I didn’t know. Even people I have worked with for years are still full of surprises. I remember very early on being in the studio with William Orbit and being blown away by his talent and technique. He was the original studio wizard that inspired so many of us when we were starting out doing this stuff. He wasn’t in a fancy studio being fluffed up by minions and technical staff. He was doing it all by himself in the front room of his house and it sounded unbelievable. He wasn’t afraid to destroy what he’d just created and play it backwards at half speed to see if that worked better.

William was obviously a very sad and big loss this year. Hundreds if not thousands of us are probably revisiting your (Spooky) remix of Water On A Vine Leaf as part of the Northern Exposure reissue in the last few weeks - a reminder of your symbiosis together as label and remixer and a milestone moment. How was he as a label owner? What did he do in those early years to set you up for success?

William was really a silent partner in Guerilla, most of the day to day was covered by Dick O’Dell and Karen Howarth. Although his influence was obviously felt musically in terms of the label output. Many of the releases passed through his Guerilla Studio in Crouch End at some point. His technique in the studio influenced many of the artists on Guerilla at that time. We were pretty much left to do what we wanted - a few singles and then someone suggested doing an album so we kept going. It was all fairly loose. Just a great roster.

Guerilla shared an office with Loud and Clear and Hard Hands and the Darling Department so there was always plenty going on in terms of DJ’s, clubs and record promotion.

“Electronic music is truly boundless and that sense of anything is possible is a reason to continually move onto fresh turf.”
— Charlie May

Some people might call Trusted Farms an ambient album because it’s beatless. But it feels to me like unlocking a special treasure trove of melodies and moments from one of electronic music’s best producers - vignettes of hidden chapters. What does this album mean to you in the grand scale of your career? What milestone, if any, does it represent? 

It’s my first album release on vinyl which is cool - I’m not sure why it’s taken me so long to get that together ?! I’m not one for self promotion so I end up with stacks of unreleased music and no label. Hopefully I can start compiling and releasing some of this beat-less work now as 40 minute albums.

I know it’s like choosing a favorite child, but is there one track from the album that stands out for a specific reason in its production, or meaning?

Not really ! Hopefully the record flows well and makes sense as a whole. I like that some of the tracks started life years ago. Copper Beech is at least ten years old. Also that a track like ‘Just Nerves’ is played live from beginning to end in one take. I had this great sound going through a guitar amp so hit record and played it. That sort of thing doesn’t happen very often. 

Can you tell us a bit about what you envisioned for the artwork for this album and what it means to you in its final form from Peter?

With artwork I know what I don’t like more than what I like which hopefully means I am open to discovering something new. I didn’t want a loud sleeve but rather something to compliment the black vinyl. Apparently there a few loose turquoise vinyl versions out there which is cool. When you showed me Peter’s work I immediately knew it was perfect for this record. 

In a previous interview you talked about the need to scratch an existential itch and your music representing the edge & bittersweetness of life. Where does Trusted Farms with this ambition?

I really do spout utter rubbish sometimes .. I mean making records is therapeutic so it serves a medicinal purpose. I think the making of and listening to music is so subjective that it can’t really be pinned down. It does help make sense of the human condition and provides a common language of sorts to that end. It’s not meant to be entirely figured out otherwise where’s the fun and the mystery. With Trusted Farms it wasn’t really until it was finished that i thought ok now it has a function and purpose. I hope that it makes people feel good afterwards, like a decent meal. Not the grandest but nutritious nonetheless.

And for aspiring producers out there looking to come even somewhere close to what you have achieved over the years, what piece of advice would you offer them?

Stay true to yourself, don’t feel you have to fit in anywhere. Play to your strengths even if they seem insignificant at first. There’s a magic that comes into play with music making. You just have to keep showing up, especially when it’s shit.

~

Charlie May / Trusted Farms is available now.

Listen to Charlie’s isolatedmix from 2020.

 
Read the whole story
mkalus
17 seconds ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

'It Ain't Right:' Texas Said It Would Halt Data Center Permits. The State is Pushing Ahead Anyway

1 Share
'It Ain't Right:' Texas Said It Would Halt Data Center Permits. The State is Pushing Ahead Anyway

A group of Texans believe they’ve discovered evidence that the state’s environmental regulatory agency has continued to issue permits to data centers despite Governor Greg Abbott’s call for it to stop. 

The nonprofits Public Citizen and FracTracker Alliance, working with local activists in Texas, looked through the public database of the Texas Commission on Environmental Quality (TCEQ) and discovered that the organization has worked on multiple permits for data center projects since Abbott called for a pause in the process on September 21. Abbott’s office denied approving any new permits in a statement to 404 Media. 

According to Public Citizen and the FracTracker Alliance, which cite documents publicly available on the TCEQ’s website, the agency has reviewed documents and assigned engineers related to more than a dozen permits related to data center projects in the state. Public Citizen listed more than 15 and the Fractracker Alliance found 35. The same day the nonprofits announced their findings, The Texas Tribune published a report that Abbott had received $9 million in donations from developers and owners of data centers.

According to the documents reviewed by 404 Media, TCEQ issued air-emission limit certificates to a large data center in Houston; approved the construction of stormwater coverage for data centers in Abilene, Barstow, and Royse City; and fast tracked gas power plants for more than a dozen data center projects.

“The TCEQ’s own data indicates that it’s business as usual for data centers and affected communities were promised a freeze. And instead what they’re getting is another reason to distrust the TCEQ and ultimately ineffective attempts to govern by press release,” Kathryn Guerra of Public Citizen said during a press conference on Monday about the findings. “Absent any comprehensive guardrails imposed by the Texas legislature, the industry will continue to move forward as fast as it can, and the TCEQ may let it.”

"They're still putting in that power plant, and there ain't nothing me and my people can do about it. We're just going to have to keep that boot on our neck. It ain’t right.”

Texas is poised to be the data center capital of the world. Three hundred already operate in the state, 100 are under construction, and 200 more are being planned. The projects include Big Tech companies like Meta — which is constructing a $14 billion data center in El Paso — smaller scale local projects like one in Taylor that would be built on land meant for a public park, and massive startups like the nuclear-powered Fermi data center in Amarillo.

In general, people hate data centers and it’s become a major political issue for voters in Texas. On September 21, Abbott directed the TCEQ to “halt all permits sought by data centers.”  Abbott said he’d told the state’s water and electric utility agencies to audit all the projects and directed “the TCEQ to pause the issuance of all permits related to data center projects until [the Electric Reliability Council of Texas] completes its review.”

Abbott’s order is broad and data centers are large and complicated construction projects with a lot of moving parts that require dozens of permits and plans. It’s possible that some of the permits uncovered by the nonprofits were filed before Abbott’s September 21 pause.

Many, however, were clearly issued afterward. Twelve of the 14 applications for gas plants and generators were filed in October. TCEQ used an expedited review process for eight of them. One was an air permit for engines and turbines that would power a data center in the Dallas suburb of Irving, Texas. The builder submitted the permit for expedited review on October 6 and a TCEQ engineer completed the initial review two days later, according to publicly available documents reviewed by 404 Media.

“No permits have been approved,” Governor Abbot’s press secretary Andrew Mahaleris told 404 Media. “In line with the Governor’s directive, TCEQ has not taken and will not take any proactive actions related to the approval of data center permits. Likewise, no other state agency will approve data center-related permits until the Public Utility Commission, ERCOT, and the Water Development Board have the information they need to make informed decisions. Texans must come first.”

404 Media asked Abbott’s office why there are multiple data center related stormwater construction projects listed as “approved” and was told to talk to TCEQ, which did not respond.

💡
Do you know anything else about this story? I would love to hear from you. Using a non-work device, you can message me securely on Signal at +1 347 762-9212 or send me an email at matthew@404media.co.

Sam Law, a researcher and manager of communications at FracTracker Alliance, told 404 Media that TCEQ gave him “a more exacting interpretation of their own situation,” he said. “Which is that they are accepting applications, but not moving forward with reviewing them. That was shown to not be true.”

Law also noted that the stormwater construction permits that read as “approved” in the TCEQ system are the result of a regulatory loophole. “The state has just approved a generic construction stormwater permit, and then to get onto that permit, people file a notice of intent and then they add them to a pre-existing permit,” Law said.

The stormwater construction permit is required to raise and level ground. “It’s often the final approval needed to move forward to prepare the site to actually build the physical structure," he added. In areas where there’s no zoning restrictions or the city is unincorporated, then that permit is all a company needs to start building.

“The Caldwell Technology Park [...] the Stargate facility, and a bunch of other very large hyperscale facilities have gotten regulatory approvals in the form of this notice of intent, so it's not like a real pause,” he said.

Law said he believes Abbott is trying to project opposition to data centers without doing the real regulatory work. “If the point of the pause is to stop the sort of approvals of data centers, that's not what's been happening,” he said.

Multiple data center projects are underway in Abilene, Texas — including OpenAI’s Stargate project. According to TCEQ’s records, it issued a water quality permit for the Abilene data center on September 23. “We are, in fact, going to get a massive gas turbine plant right to people’s houses,” Abilene resident and Democratic state senate candidate Riley Rodriquez said during Public Citizen’s press conference.

Rodriquez said that residents had gotten letters from TCEQ about the incoming gas plant and how it might affect air quality in the region. The people of Abilene have fought and won the right to testify at upcoming public hearings. 

“At the end of the day they’re going to flip that switch. Doesn't matter what we have to say at that public hearing, and I know that is a doom and gloom way to look at this. But that's the fact,” Rodriquez said. “The fact of the matter is, we can go to that. We can have the best comments. We can have the best information [...] and I could have 500,000 people behind me, and it doesn't matter because they're going to flip that switch because they put the money on it anyways. And we got to live with that  — with those consequences.” 

Rodriquez said the people of the region found out about Stargate too late to do anything about it. “We're in a unique situation for us because we didn't have a chance to do any of the things that these great people are doing. We didn't have a chance to do any of that. ‘It was built, concrete's poured, generators are going in, boys. Sorry,’” he said.

“So Abbott made his announcement. That's really great, that's really awesome,” Rodriquez said. “Guess what? They're still putting in that power plant, and there ain't nothing me and my people can do about it. We're just going to have to keep that boot on our neck. It ain’t right.”

In his September 21 letter, Abbott said he’d ordered the pause because “the goal is to put Texans first.”

Read the whole story
mkalus
15 hours ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

Batman vs The Trolley Problem

1 Share
PERSON:
Read the whole story
mkalus
19 hours ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

Police Say Scammers Used AI to Clone a Sheriff’s Voice

2 Shares
Police Say Scammers Used AI to Clone a Sheriff’s Voice

A Florida police department claims that scammers used AI to clone a sheriff’s voice, with scammers increasingly using voice clones that trick people into thinking they’ve missed jury duty or have a warrant out for their arrest are increasing.

According to Florida news outlet News6, scammers cloned Osceola County Sheriff Steve Moser’s voice and left a voicemail with a resident.    

“They cloned his voice and was using Steve’s picture as well to say it was him making the phone call, and it was not,” Sheriff Chris Blackmon told News6.

💡
Have you been the target of deepfake video or AI voice cloning scams? I would love to hear from you. Using a non-work device, you can message me securely on Signal at sam.404. Otherwise, send me an email at sam@404media.co.

Impersonating a police officer is a third-degree felony in Florida. The Osceola County sheriff’s office did not immediately respond to a request for comment.

This particular scam cloning cops is spreading across several states, with reports of jury duty and arrest warrant scams targeting people in Georgia and Pennsylvania in the last week. These other reports don’t mention AI voice cloning explicitly, but note that the scammers sometimes have similar voices and tones as local police officers.  

Voice cloning scams have been around for years, with scammers using commercially available AI voice impersonation tools to target the elderly, families, and businesses. Last year, 404 Media investigated real-time deepfake scams that incorporated voice and video to defraud people. In 2024, we reported on the ways scammers cloned celebrity voices and use AI videos in YouTube ads to scam people.

Scammers often impersonate company executives or leadership to trick employees into sending money, and voice cloning appears to be an increasing part of that. In February, scammers cloned a managing partner of a law firm with AI. Ultimately, a private bank ended up transferring $108 million.

Read the whole story
mkalus
20 hours ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

US Third Circuit: AI training not fair use after all

1 Share

The hot news in AI training is a development in a case from before chatbots as we know them — Thomson Reuters v. Ross Intelligence from 2020. Thomson Reuters owns Westlaw, which publishes legal opinions with summaries. The summaries are copyrighted.

Ross was training a machine learning model on the Westlaw summary text. Thomson Reuters sued in 2020 and won in 2025.

The bankrupt shell of Ross Intelligence appealed to the Third Circuit — who rejected the appeal on 29 September. [Courthouse News]

The generative AI industry has been relying on the 2025 ruling in the Anthropic books case that training a chatbot was fair use if you’d bought the books. They’re wondering if the new Ross ruling could put that into question. The judges here held that Anthropic does not apply in the Ross case.

This Ross ruling shouldn’t be huge news — the original verdict against them came before the Anthropic ruling — but it’s been a bit of a shock to an AI industry that thought they were in the clear.

Judge Tamika Montgomery-Reeves wrote: [opinion, PDF, archive]

Under ROSS’s framing, this case appears to concern the future of AI legal technology. But appearances can be deceiving.

… The undisputed evidence reflects that Thomson Reuters’s materials possess a creative spark, and ROSS aspired to be a direct competitor by using them for a highly similar purpose. We therefore hold that Thomson Reuters’s materials are copyrightable and that ROSS’s use was not fair.

Fair use rulings are very dependent on the particular facts and circumstances, so this new ruling doesn’t promptly blow up the Anthropic ruling. But it does raise all sorts of exciting legal questions!

Fair use in the US has various factors in law. How these apply is different in every case. Feeding the Common Crawl of the whole Internet into your research model is different to feeding it to Claude, and that’s different to feeding Westlaw into Ross Intelligence’s machine learning model.

Ross Intelligence plans to take this appeal to the Supreme Court. I have no idea how the Supreme Court would rule on it, or if they’d even hear the case. If they did, I’d expect amicus briefs from every AI company about how they should let Ross Intelligence off.

If the Supreme Court did let Ross off, what would happen next? Anthropic still have that previous ruling. But someone bringing a new case against Anthropic could use a (hypothetical) ruling in Ross’s favour.

If that happened, we might end up with the AI vendors finally being forced to pay licenses for everything. Like Anthropic wasn’t in enough financial deep water.

But this is all speculative right now. You probably can’t use this Ross appeal rejection as a fresh bludgeon for Anthropic. Yet.

Probably nothing much will happen. But it’ll definitely be fun!

Read the whole story
mkalus
1 day ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete

Pluralistic: Israeli ad-tech company was a delivery system for "mercenary spyware" (17 Oct 2026)

1 Share


Today's links



A lonely country road with a large roadside billboard. Thrusting out of the billboard is a punching fist with bloody, spiked brass knuckles; it is surrounded by scabrous craters. The sky is a psychedelic roil of red-brown clouds, from behind which loom indistinct, vast tropical flowers.

Israeli ad-tech company was a delivery system for "mercenary spyware" (permalink)

More than half of all internet users have installed an ad-blocker; Doc Searls calls it the largest consumer boycott in history. As large as that boycott is, everyone – yes, everyone – should block every "programmatic" ad, because the entire system is so insecure that failing to do so could result in the total compromise of any or all of your digital devices.

That's the inescapable conclusion of Citizen Lab's latest blockbuster investigative report, "Exposing AdFection," which reveals how the largest ad-tech companies in the world, including Google and Facebook, allowed themselves to be hijacked by a "mercenary spyware" company that used the ad system to locate targeted individuals and serve "zero-click malware" that took over their computers and phones without them having to take any action:

https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

These tech giants amassed detailed surveillance dossiers on virtually every internet user, and they've assigned each of us unique, persistent identifiers, like a Social Security Number for spying. These companies also allow advertisers – or anyone pretending to be an advertiser – to serve blobs of code (which is all an ad is) to anyone based on those identifiers.

This allowed an Israeli spyware company called Discover-Tech (which masquerades as an ad-tech company) to sell totalitarian governments and sleazy corporate mercenaries the ability to pluck individual internet users out of the billions who log in every day and then serve "malicious ads" (that is, blobs of arbitrary code) to those targeted users. These malicious ads contained "no-click, zero-day" attacks, which meant that they exploited previously unknown vulnerabilities to take over devices without any user interaction. The mere act of loading a web-page or opening an app that relied on one of these gigantic ad-tech companies to serve ads was enough to compromise your device. No clicks needed, and no warning.

Among the targets of this attack campaign were the computers of workers at Al Jazeera. They were attacked with malware from the mercenary spyware company Candiru (which now calls itself "Integrity Labs" because irony is not dead). Beyond Candiru, Discover-Tech also facilitates attacks by numerous criminal mercenary spyware companies, serving ads on hundreds of thousands of sites and apps.

Discover-Tech was "certified" as a safe supplier by Google, Yandex, Microsoft, Beeswax (a division of Comcast) and IAB, the ad-tech industry's leading professional association. Ironically, Discover-Tech even attacked users by serving them malicious GDPR notices that appeared to let users opt out of commercial surveillance.

Because Discover-Tech was certified by all these industry bodies and firms, it had access to more than four billion ad-auctions, meaning that on billions of occasions, it was able to collect the identities of users loading apps and visiting websites, check them against the list of targets, and attack any victims it discovered through this dragnet.

Discover-Tech is an Israeli company with ties to other Israeli spyware and hacking companies, including through its board, whose members included Eric Banoun ("One of the pioneers of offensive cyber in Israel" –Haaretz). They have overlaps, relationships and affiliations with a rogue's gallery of Israeli companies, including the notorious NSO Group, who routinely sell cyber-weapons to the world's worst governments and whose products have been used to attack journalists, embassy workers, and activists.

The whole incident highlights the monumental insecurity of the ad-tech industry, whose indiscriminate and voracious surveillance and manifestly insufficient vetting and security auditing now expose every internet user in the world to terrifying targeted attacks. These companies – including Google, a thrice-convicted monopolist whose surveillance tendrils are wrapped around the whole world – claim that they operate their networks with prudence and oversight. But the proof is in the pudding: for years, they've played host to a murderer's row of cyber-mercenaries who used their infrastructure to attack journalists and others.

The only way to avoid this is to block ads. This is easy enough to do in a browser (which is why the majority of internet users have installed an ad-blocker in their browsers), but it's illegal to reverse-engineer and modify an app so you can block the ads in it:

https://pluralistic.net/2026/07/21/dickovers/#block-element

Many websites run anti-ad-block scripts that push out nagging, guilt-tripping notices that call you a thief and a cheapskate for blocking ads. Ignore those notices: if a website is running "programmatic" ads that allow arbitrary third parties to spy on billions of people and target individuals for malicious device takeovers, they are charging too high a price to see their content.

Some sites go further: their notices demand that you either turn off your ad-blocker or pay for a subscription. This "pay or okay" scheme is illegal in Europe, California and other territories with strong privacy laws, and they are morally bankrupt besides. Privacy shouldn't be a luxury item and everyone deserves to be secure from cyber-attacks:

https://noyb.eu/en/noybs-pay-or-okay-report-how-companies-make-you-pay-privacy

This report also provides the most comprehensive rebuttal to a dangerous idea that refuses to die: that we should improve competition in the ad-tech sector by assigning every internet user a mandatory, government-issued advertising ID to "democratize" ad-targeting and followup (which the sector calls "attribution"):

https://pluralistic.net/2024/08/07/revealed-preferences/#extinguish-v-improve

Despite all this, none of it is an indictment of ads per se. The problem here isn't advertising, it's surveillance. The ad-tech sector has convinced advertisers that targeting ads to users rather than content will massively improve ad performance. The evidence for this is very poor: targeted ads improve clickthrough rates by less than 5% (relative to content-based ads that relate to the substance of the page you're looking at), and they're incredibly expensive (and very dangerous!) to serve.

On top of all that, surveillance-based ads shift power away from publishers (who know more about the materials they publish than any ad-tech company ever will) to spying ad-tech companies (who can spy on users in ways that no publisher could ever match). Whatever minor additional revenues surveillance advertising can wring out of the market are totally swamped by the cost of the ad-tech sector's own operations, which the ad-tech sector makes up for by grossly underinvesting in security and by colluding to cheat publishers and advertisers, charging more for ads and paying less to the websites that run them:

https://en.wikipedia.org/wiki/Jedi_Blue

If we want to improve competition in advertising services, the answer isn't to facilitate spying (which also allows the world's scummiest cyber-mercenaries to stage and serve targeted attacks). We should ban surveillance advertising altogether, restoring context-based ads to their role as the way that publishers make an honest living without selling out their audiences:

https://pluralistic.net/2023/05/31/context-ads/#class-formation


Hey look at this (permalink)



A shelf of leatherbound history books with a gilt-stamped series title, 'The World's Famous Events.'

Object permanence (permalink)

#25yrsago Linux on a Big Mouth Billy Bass https://web.archive.org/web/20010927153043/http://bigmouth.here-n-there.com/

#20yrsago No-Fly lists even stupider than suspected https://web.archive.org/web/20061019002553/http://rawstory.com/showoutarticle.php?src=http%3A%2F%2Fwww.cbsnews.com%2Fstories%2F2006%2F10%2F05%2F60minutes%2Fmain2066624.shtml

#20yrsago Canadian MP booted for his blog https://web.archive.org/web/20061026153747/http://www.cbc.ca/canada/story/2006/10/18/turner-caucus.html

#20yrsago Recording industry shuts out Brazilian legal scholars https://web.archive.org/web/20061103225020/http://www.a2kbrasil.org.br/ENG/SIGN-A-PETITION-FOR-AMENDING-THE

#20yrsago How pickpockets work https://web.archive.org/web/20070110023812/http://www.kiplinger.com/magazine/archives/2006/11/mystory.html

#15yrsago Why are more people opting for legal name-changes than ever before? https://web.archive.org/web/20111020163908/http://www.bbc.co.uk/news/magazine-15333140

#15yrsago Advice to the 1% from Lemony Snicket https://occupywriters.com/works/by-lemony-snicket/

#15yrsago Proposed Australian law makes it an offense to insult Gaming Minister Michael O’Brien https://web.archive.org/web/20120507161803/http://www.heraldsun.com.au/news/more-news/surely-this-is-a-joke/story-fn7x8me2-1226167552466

#15yrsago Aloha From Hell: Sandman Slim goes back to Hell and kicks more ass https://memex.craphound.com/2011/10/18/aloha-from-hell-sandman-slim-goes-back-to-hell-and-kicks-more-ass/

#10yrsago California DMV thinks “INFOS3C” is a dirty word https://www.techdirt.com/2016/10/17/california-dmv-rejects-1nfos3c-vanity-plate-because-sexual-connotation/

#10yrsago Howard Stern won’t release Trump tapes https://www.billboard.com/music/music-news/howard-stern-on-replaying-his-donald-trump-interviews-it-would-be-a-betrayal-7542079/

#10yrsago Kim Stanley Robinson says Elon Musk’s Mars plan is a “1920s science-fiction cliché” https://web.archive.org/web/20161018043554/http://www.bloomberg.com/news/articles/2016-10-17/why-elon-musk-s-mars-vision-needs-some-real-imagination

#10yrsago UK’s Investigatory Powers Tribunal says GHCQ illegally spied for 17 years https://www.theverge.com/2016/10/17/13305270/uk-illegal-surveillance-gchq-investigatory-powers-tribunal

#10yrsago Project Include cuts off Y Combinator because Peter Thiel is a part-time investor there https://web.archive.org/web/20161019043240/https://motherboard.vice.com/read/horrified-by-trump-silicon-valley-leaders-debate-cutting-ties-to-peter-thiel

#10yrsago Islamophobic terrorist cell planned a “bloodbath” in Kansas, wanted to kill Muslim babies https://web.archive.org/web/20161018144035/https://www.washingtonpost.com/news/post-nation/wp/2016/10/15/it-will-be-a-bloodbath-inside-the-kansas-militia-plot-to-ignite-a-religious-war/?utm_term=.a9d769256cf6

#10yrsago Everything Belongs to the Future: a tale of pharmadystopian, immortal gerontocrats https://memex.craphound.com/2016/10/18/everything-belongs-to-the-future-a-tale-of-pharmadystopian-immortal-gerontocrats/

#10yrsago UK government proposes issuing Britons with unique porn-viewing ID numbers https://www.openrightsgroup.org/blog/a-database-of-the-uks-porn-habits-what-could-possibly-go-wrong/

#10yrsago Donald Trump’s mail-servers are running Windows 2003 https://pluralistic.net/2021/10/18/labor-shortage-discourse-time/#core

#5yrsago Copyfraudster censors investigation of implausible covid gadget https://pluralistic.net/2021/10/18/labor-shortage-discourse-time/#copyfraud

#5yrsago Corporatism made John Deere ripe for a strike https://pluralistic.net/2021/10/18/labor-shortage-discourse-time/#deere-dash


Upcoming appearances (permalink)

A photo of me onstage, giving a speech, pounding the podium.



A screenshot of me at my desk, doing a livecast.

Recent appearances (permalink)



A grid of my books with Will Stahle covers..

Latest books (permalink)



A cardboard book box with the Macmillan logo.

Upcoming books (permalink)

  • "The Post-American Internet," a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

  • "Unauthorized Bread": a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, April 20, 2027

  • "Enshittification, Why Everything Suddenly Got Worse and What to Do About It" (the graphic novel), Firstsecond, 2027

  • "The Memex Method," Farrar, Straus, Giroux, 2027



Colophon (permalink)

Today's top sources:

Currently writing:

  • “Once Is Enemy Action,” a science fiction novel about the origins of modern technofascism. Today's words: 563 (26602 total).

  • "The Post-American Internet," a sequel to "Enshittification," about the better world the rest of us get to have now that Trump has torched America. Fourth draft completed. Submitted to editor.

  • A Little Brother short story about DIY insulin PLANNING


This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

https://creativecommons.org/licenses/by/4.0/

Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.


How to get Pluralistic:

Blog (no ads, tracking, or data-collection):

Pluralistic.net

Newsletter (no ads, tracking, or data-collection):

https://pluralistic.net/plura-list

Mastodon (no ads, tracking, or data-collection):

https://mamot.fr/@pluralistic

Bluesky (no ads, possible tracking and data-collection):

https://bsky.app/profile/doctorow.pluralistic.net

Medium (no ads, paywalled):

https://doctorow.medium.com/

Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

"When life gives you SARS, you make sarsaparilla" -Joey "Accordion Guy" DeVilla

READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies ("BOGUS AGREEMENTS") that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

ISSN: 3066-764X

Read the whole story
mkalus
1 day ago
reply
iPhone: 49.287476,-123.142136
Share this story
Delete
Next Page of Stories