The homepage of the Ashley Madison Web site is displayed on an iPad in this photo illustration taken in Ottawa in July. (Chris Wattie/Reuters)
Amid reports that hackers apparently had posted online the personal and financial information for up to 40 million members of the infidelities-R-us Web site Ashley Madison, some Americans responded Tuesday night with a shrug.
Just as many, however, responded with a smirk.
Call it schadenfreude. Or, to use the parlance of our high-tech, low sympathy times, a collective lulz. But many people took to Twitter to express their amusement at what seemed to them like poetic justice.
Nobody gloated more, however, than the hackers themselves.
“Avid Life Media has failed to take down Ashley Madison and Established Men,” the Impact Team wrote in a statement accompanying the alleged leak,according to Wired. “We have explained the fraud, deceit, and stupidity of ALM and their members. Now everyone gets to see their data. Find someone you know in here? Keep in mind the site is a scam with thousands of fake female profiles. See ashley madison fake profile lawsuit; 90-95% of actual users are male. Chances are your man signed up on the world’s biggest affair site, but never had one. He just tried to. If that distinction matters.
“Find yourself in here? It was ALM that failed you and lied to you. Prosecute them and claim damages. Then move on with your life. Learn your lesson and make amends. Embarrassing now, but you’ll get over it.”
How your online data can get hijacked
What happens when you send an e-mail or buy something online? Most of what we do on the Internet requires sending data thousands of miles to other computers. But how does the data know where to go, and can it get lost or stolen along the way? (Julio C. Negron, Craig Timberg and Jorge Ribas/The Washington Post)
Although some security experts cast doubt on the authenticity of the 9.7-gigabyte leak, most said it looked legit. Brian Krebs, the security expert who writes KrebsonSecurity, was skeptical at first but then reported late last night that he had spoken with “three vouched sources who have all reported finding their information and last four digits of their credit card numbers in the leaked database…. I’m sure there are millions of AshleyMadison users who wish it weren’t so, but there is every indication this dump is the real deal.”
Assuming it is, Tuesday’s mega-doxing appears to fulfill the threat issued in July, when the Impact Team first claimed that it had hacked Ashley Madison and said it would publish its customers’ records unless the company “permanently” took down its Web site.
But before you celebrate your comeuppance over less ethical friends and colleagues, consider this: The Ashley Madison leak is about a lot more than the public shaming of philanderers.
Above all, it’s about Internet privacy.
Within minutes of the alleged leak, people began combing the data for information and posting their findings. Journalists and security experts quickly noted that there were 15,000 .mil or .gov e-mail addresses among those used for the site.
Under military rules, philanderers can be punished by a year in confinement and a dishonorable discharge, which means losing their pension, Slate reported.
“I wonder how many military retirements will be dropped tomorrow,” one person wrote on Twitter. “It certainly be an interesting few weeks.”
But the Internet soon turned its ire on other suspected Ashley Madison members, such as university professors and other “SJWs,” a derogatory acronym for “social justice warriors,” or people who speak out publicly against discrimination.
Computer security expert Graham Cluley quickly warned against such witch hunts on his blog.
“For one thing, being a member of a dating site, even a somewhat seedy one like Ashley Madison, is no evidence that you have cheated on your partner,” he wrote. “You might have joined the site years before when you were single and be shocked that they still have your details in their database, or you might have joined the site out of curiosity or for a laugh … never seriously planning to take things any further.”
Ashley Madison’s Korean Web site is shown on a computer screen in Seoul. (Lee Jin-man/AP)
You might be a journalist who joined to write about Ashley Madison, for example. Or, as some self-described Ashley Madison users have said on Reddit, you may be in an open marriage.
“But more importantly than all of that, if your e-mail address is in the Ashley Madison database it means nothing,” Cluley wrote. “The owner of that e-mail address may never have even visited the Ashley Madison site.”
Cluley also wrote recently about the real risk that a leak could lead to suicide.
“What the howling wolves doesn’t seem to understand is what they are doing is online bullying. The kind of bullying that clearly can cause such personal tragedies,” he wrote.
“‘If they are cheating, they deserve it,’ the wolves reply. While I totally disagree with that argument, let me add that their kids do not deserve to lose a parent. Their family doesn’t deserve to lose a loved one. And that also applies to friends, colleagues, neighbors and others. If you are found to have bullied somebody into suicide however … I believe you deserve jailtime for that.”
And then there is another concern: that although the leak itself appears to be a moral vendetta, it could lead to individual cases of blackmail as people comb through the information and spot co-workers, neighbors or acquaintances.
By the time you read this, there is a good chance someone on 4chan will have figured out a way to make the leaked info searchable.
Amid the gloating on Tuesday night, a few people recognized the Ashley Madison leak as something much bigger than a chance to snicker: a turning point for American society, the Internet and maybe even marriage itself.
In 2012, writer Jon Methven imagined just this type of tectonic Internet shift in his short story, “Life After A Total Hack.” Methven’s fictional tale began with a woman agonizing over the chance her husband could learn about her online sexual fantasies, but quickly broadened. Widespread hacking would render much of the Internet itself useless, Methven’s story suggested.
“Molly missed her online communities: Facebook, SoundCloud, MyLife, Goodreads (though she hated to read), Twitter, Google+, Meetup, Foursquare, Pinterest, CafeMom (even though she did not like children), StumbleUpon, Flickr and LinkedIn, all of which she used to visit daily,” he wrote. “When the hack occurred, she was nervous about visiting any of the sites lest more of her personal life get leaked online.”
Journalist Chris Hayes took to Twitter to similarly suggest that if Ashley Madison could be hacked, so could many other things we might not feel nearly as smug about.
Perhaps the best and broadest take on #AshleyMadison-gate came from The Awl’s John Herrman.
“I’m not sure anyone is really reckoning with how big this could be, yet,” he wrote. “If the data becomes as public and available as seems likely right now, we’re talking about tens of millions of people who will be publicly confronted with choices they thought they made in private. The result won’t just be getting caught, it will be getting caught in an incredibly visible way that could conceivably follow victims around the internet for years.”
Eight smart ways to strengthen your password
In light of recent cyber security breaches, here are the best ways to protect your passwords. (Sarah Parnass and Natalie Jennings/The Washington Post)
Herrman wondered how media organizations would treat the leak, for example. Is it news for a politician to have an affair? What about a police chief? And what about your kid’s kindergarten teacher?
“I may be overestimating how far things will unfold, but this feels like a momentous event,” he wrote. “It’s easy to kid about the fact that these people were using a site intended to help them cheat. But if understood in more abstract terms, this hack has the potential to alter anyone’s relationship with the devices and apps and services they use every day,” Herrman argued.
“Here were tens of millions of people expecting the highest level of privacy that the commercial web could offer as they conducted business they likely wanted to keep between two people. This hack could be ruinous — personally, professionally, financially — for them and their families. But for everyone else, it could haunt every email, private message, text and transaction across an internet where privacy has been taken for granted.”
In other words, the Ashley Madison leak is about a lot more than infidelity. And the information the Impact Team just unleashed onto the Internet is more than an amusing sex scandal.
It might be Pandora’s box.
Michael E. Miller is a foreign affairs reporter for The Washington Post. He writes for the Morning Mix news blog. Tweet him: @MikeMillerDC