Book summary “Attack Surface”: summary

Introduction

You live in a world where your every digital trace is harvested, analyzed, and monetized by powerful corporations and authoritarian states. When you rely on infrastructure built for convenience, you expose yourself to pervasive surveillance and invasive malware deployed by private contractors. You face an asymmetric threat landscape where technical skills alone cannot protect you from systemic abuses of power.

Cory Doctorow's Attack Surface explores how corporate espionage and state surveillance infiltrate modern life through compromised networks and hardware vulnerabilities. The central idea is that surveillance capitalism and oppressive state power can only be resisted through continuous political solidarity, technical friction, and operational security. You will journey from blind techno-optimism to harsh political realism as you discover the true cost of digital compliance.

This text answers several pressing questions about modern resistance:

• How do private military contractors exploit telecommunications infrastructure for mass surveillance?
• What are the real limits of technical solutionism against systemic tyranny?
• How can you balance operational security with effective civic resistance?

1. Surveillance Infrastructure and Operational Security

Neglected telecommunications infrastructure creates systemic vulnerabilities that authoritarian regimes and private contractors exploit for mass surveillance.

Old and neglected networks provide the ideal foundation for state surveillance.

Slovstakia built its communications network before the Berlin Wall fell using primitive materials. A succession of contract operators mismanaged the system and upgraded it with the jankiest gear, leaving networks half-configured, half-secured, and half-documented.

Masha spends sixteen hours working in the main telcoms data-center for Bltz to install a Xoth Sectec network appliance for the Slovstakian Interior Ministry. The job was promised as three hours, but the hardware must handle ten million simultaneous connections. Litvinchuk tries to force Masha to sign a nine-page photocopied form asking her to list all NGOs and charitable organizations she has ever contributed to.

Authoritarian regimes use bureaucratic paperwork as a trap to create legal liabilities for visitors and dissidents.

Protest Operational Security

Maintaining security during active street protests requires rigorous protocols to counter advanced state surveillance.

Dissidents must use technical countermeasures to evade fake cell towers and facial recognition.

Activists use The Onion Router to bounce network connections globally with encrypted hops, hiding user packets from interception. You can access secure forums via darknet hidden services located in stable data-centers, such as Slovstakian protesters accessing underground communication groups over Facebook’s Tor Hidden Service at https://facebookcorewwwi.onion.

Rigorous protocols protect you from surveillance during protests:

• Run the nightly build of Paranoid Android every night and check signatures every time.
• Update IMSI-catcher countermeasures to defeat fake cell towers.
• Ensure smart-meters are disconnected from the network to prevent remote heating shutoffs.
• Wear dazzle makeup to produce lens flares and sensor jitter on cameras.
• Remove phone batteries or place phones into Faraday bags before discussing sensitive actions.

Digital Espionage Techniques

Stylometry and plagiarism detectors can be repurposed to forge realistic whistleblowing emails and impersonate individuals convincingly.

You can train stylometry tools on writing samples to fool automated verification systems.

Masha uses an Anonymouth fork trained on thousands of individual profiles to forge an email from South African mercenary Nicholas Van Dijk to Litvinchuk. It takes fifteen minutes of wait time for Litvinchuk to check his compromised email spool.

Binary transparency is theoretically designed to catch backdoors in software updates, but it is often ignored or overridden by state pressure. Tanisha receives a binary transparency error on an update for Hushush while organizing protests against the Oakland Fusion Center.

2. Network Analysis and Technical Solutionism

Technical solutionism and mass data collection mirror carbon emissions, creating a datapocalypse while ignoring human and political consequences.

Carrie Johnstone upbraids a young Masha for suffering from solutionism during a private dinner at a steakhouse, warning her that focusing solely on technical fixes ignores people, systems, and politics. This data-collection practice mirrors carbon emissions, where early pleasures and profits mask irreversible, long-term catastrophic consequences. Just as fossil fuel barons had a vested interest in denying climate change until mitigation became impossible, the barons of the surveillance economy pump private data into the cloud while ensuring widespread confusion until a datapocalypse is inevitable.

Intelligence Operations

You can map information cascades and identify central network nodes to determine chain of command and predict organizational behavior. By tracing how messages and directives spread through an activist or bureaucratic network, an investigator builds detailed organizational charts and locates primary nodes whose removal causes maximum disruption. Masha used cascade analysis on DHS procurement bids, LinkedIn profiles, and press conferences to pinpoint Carrie Johnstone as the primary node driving the San Francisco terrorist response team after three hundred emails were sent to the DHS volunteering to help make San Francisco safe.

Automated bots and viral online quizzes can be deployed against activist networks to extract real names, build detailed social graphs, and map community interconnections. By designing engaging viral mechanisms like personality quizzes that require long questionnaires and unique sharing addresses, operators harvest relational data and automatically map social graphs of target populations. Masha built viral quiz sites that categorized Xnet users and generated unique sharing addresses, successfully mapping who was friends with whom on a twenty-seven-inch tube display.

Information Cascades

Mass surveillance tools inherently generate a massive ratio of false positives, sweeping up thousands of harmless individuals for every genuine threat identified. When mathematical models flag potential risks among large populations where targets are vastly outnumbered by ordinary people, the resulting output inevitably tags hundreds of harmless individuals for every actual suspect, overwhelming analytical manpower. Masha argued with Carrie Johnstone over proactive arrests, pointing out that flagging minor actors will yield a thousand to one ratio of kidiots outnumbering terrorists.

You can use open-source stylometry tools to deanonymize online aliases by matching idiosyncratic punctuation, vocabulary, and spelling errors against known corporate or public postings. By training a tool called Anonymouth on public posts made under a real name and feeding it scraped corpuses from various anonymous handles, analysts calculate percentage matches to identify targets with high statistical accuracy. Masha used Anonymouth to discover an 86 percent fit for Johnstone's match against the Americhick1776 corpus, compared to a mere 41 percent score for the next-best match of Bornintheusa1979.

3. Corporate Mercenaries and Hardware Vulnerabilities

Private military contractors hoard zero-day exploits and deploy IMSI-catchers to deliver baseband malware that bypasses operating systems.

Major tech companies frequently sit on bug reports or fail to patch vulnerabilities expeditiously due to gag clauses and earnings pressures. Private intelligence firms capitalize on this by paying top dollar for zero-day exploits, creating a glut of weaponized code on the market. Carrie Johnstone offers Masha an arsenal of exploits for various operating systems, allowing her to bypass encryption barriers like Google search URL paths.

Surveillance State Priorities

Intelligence agencies prioritize hoarding exploitation capabilities and collecting mass data over preventing localized war crimes or atrocities. When presented with concrete photographic evidence of systematic executions and atrocities captured via spyware, institutional leadership dismisses it as outside their scope, arguing that taking action would compromise the secrecy and tactical utility of their surveillance capabilities. Masha brings printouts of atrocity photos to Carrie Johnstone, who tells her that maintaining the secrecy of their SIGINT capabilities takes priority over preventing revenge killings.

Adversaries use cell-site simulators or IMSI-catchers to trick nearby phones into connecting. Once connected, they deliver tailored firmware exploits to the baseband radio—the low-powered computer handling cellular communications—which operates in a blind spot hidden from the phone's main operating system and security apps. Masha's custom phone case acts as a honeypot, logging an attack where a fake cell tower delivered a baseband malware payload immediately upon her arrival at Tanisha's apartment at 9:18 a.m.

Hardware Firewalls

Moving a USB device between systems can transfer malware that conventional operating systems cannot detect. Paranoid users deploy open-source hardware firewalls to filter instructions passing between USB devices and computers, blocking unauthorized or malicious commands. Masha uses a USG dongle built by New Zealand hackers to safely connect Tanisha's compromised phone to her laptop for forensic analysis.

You can protect your equipment during forensic investigations by following a strict procedure:

• Plug the phone into a cable and connect it to a hardware filtering dongle (USG).
• Connect the USG to the laptop's USB port.
• Reboot the phone into developer mode using specific button timing.
• Directly manipulate and analyze the phone's firmware from the laptop safely.

4. Asymmetric Warfare and Moral Compromise

Guilt-ridden intelligence operatives attempt to ease their conscience by passing classified leaks to sympathetic engineers while facing an asymmetric threat landscape.

You operate in a digital environment where defenders must maintain perfection forever, while attackers only need a single mistake to breach a system. Commercial software and consumer apps are built without accounting for targeted state attacks, making resistance nearly impossible over time. Masha reflects on how easily she compromised targets because the deck was entirely stacked in favor of the attackers.

Corporate contractors in warzones and capitals operate in a hermetically sealed bubble of performative debauchery and exorbitant pay. Zyz houses its employees and visiting government liaisons in heavily guarded compounds, shuffling them between secure offices and elite clubs via black-car services while they brainstorm mass surveillance tools. Masha spends a week in the Green Zone drinking with government officials, billionaires, and congressional staffers before starting her assignment in Mexico City.

Spooks who realize they are building a positive feedback loop of state-sponsored abuse cannot whistleblow due to institutional destruction of previous dissenters, so they dump stolen files on sympathetic contractors. An NSA Tailored Access Operations visitor named Ray passes Masha an eight gigs thumb drive containing classified CIA torture logs to keep himself honest. Carrie Johnstone offers Masha an independent contractor position to develop internet-of-things and smart appliance targeting for three billion billings, building on five hundred million billings two years prior.

Opsec Countermeasures

When caught with unauthorized storage media, operatives can surrender encrypted partitions or decoy files containing unrelated material to satisfy security inspections. Masha stores stolen intelligence docs in a hidden partition on her laptop while filling her thumb drives with porn and zeroing out sectors. You can protect sensitive data by following specific security procedures:

• Secure-erase the compromised thumb drive by writing zeroes over every sector multiple times.
• Store sensitive files in a plausible deniability partition using a strong passphrase.
• Fill the remaining storage with unrelated decoy files protected by a weak passphrase.

Evading Facial Recognition

Physical access to hardware by a sophisticated adversary completely compromises device security, local encryption, and crypto. Masha worries about hotel chambermaids being co-opted for evil maid attacks and puts her phone in a freezer during a conversation to avoid surveillance. Facial recognition systems relying on statistical machine learning models are brittle and can be blinded by applying adversarial perturbations like custom makeup or patterned stickers. Machine learning models use brittle statistical inferences based on easy-to-spot facial markers rather than complex ones. By using custom patterns generated from research papers on glasses or frames, a system can be fooled into recognizing a face as an avocado, helicopter, machine gun, or porg rather than a human.

Ange downloads a custom perturbation pattern from a Stanford research template site, which the narrator prints, cuts out with a sewing kit, and glues to sunglasses with chewing gum to blind CCTV algorithms. You can disrupt facial recognition algorithms by following specific steps:

• Check LinkedIn profiles of current surveillance company employees and read their published machine learning research papers.
• Download custom perturbation patterns from vulnerability template sites.
• Print the pattern and affix it to glasses frames using adhesive to disrupt facial recognition algorithms.

5. Civic Resistance and Systemic Reform

Technology alone cannot defeat systemic tyranny, but it can provide temporary shelter while democratic politics and mass mobilization drive permanent structural reform.

You cannot rely on cryptography to stop tyranny. Ange explains that just as body armor does not stop police brutality, technology only connects people. Consensual democratic government and accountability remain the ultimate tools for curbing official abuses of power.

Masha stands before a firing squad of streaming phones in an Oakland public meeting, initially choking on her words before confessing that she used to hunt good guys on behalf of bad guys.

You must move beyond passive online complaints and mobilize numbers directly:

• Go to the houses of people who only complain online and drag them out.
• Pick up five more friends on the way to the march.
• Expose them to social proof by showing all the other people who are attending.

Corporate Espionage

Realizing that Zyz is finished, you conclude you must submit to Xoth as a corporate protector to save yourself from severe retaliation. Masha accepts Ilsa's summons to work as a contractor for Xoth, recognizing that she needs institutional protection to survive corporate warfare.

Three to four thousand people march outside the Xoth office tower, chanting slogans in English and Slovstakian that derail the pitch meeting with the City. Masha tells Ilsa that the arrangement is not the right fit, refuses to be physically detained by the guards, and walks out of the Xoth boardroom into the crowd.

Activism and Personal Transformation

Police deploy dirtboxes acting as flying cell-phone towers to vacuum up phone identities. Tech-savvy protesters deploy civilian harriers trained with machine-learning classifiers to chase and collide with police drones.

You can neutralize aggressive police provocations by following specific steps:

• Spot coordinated provocations designed to trigger riots.
• Shout instructions to sit down immediately.
• Form a tight, knee-to-knee and hip-to-hip sitting crowd to prevent police dispersion.

In Slovstakia, relentless protests cause the president and his successor to flee by helicopter as police officers abandon their gear and crowds breach the palace. Kriztina tracks right-wing extremists in post-revolutionary Slovstakia using the former dictator's surveillance software, arguing with Masha over whether to shut down the data center.

You must accept that technology requires political action. Cory Doctorow reflects on his evolution from technological optimist to realistic activist who recognizes that technology alone cannot maintain permanent liberation without systemic political action.

10 Key Ideas

1. Neglected telecommunications infrastructure and primitive networking materials provide the ideal foundation for state surveillance and bureaucratic entrapment.
2. Dissidents must use technical countermeasures like The Onion Router and IMSI-catcher countermeasures to evade fake cell towers, facial recognition, and surveillance during protests.
3. Automated bots, viral online quizzes, and cascade analysis map social graphs, trace chains of command, and expose network vulnerabilities.
4. Technical solutionism and mass data collection mirror carbon emissions by creating an inevitable datapocalypse while ignoring human and political consequences.
5. Private intelligence firms capitalize on major tech companies failing to patch vulnerabilities by paying top dollar for zero-day exploits and deploying baseband malware.
6. Spooks who realize they are building a positive feedback loop of state-sponsored abuse pass stolen files on thumb drives to sympathetic contractors instead of whistleblowing.
7. Attackers enjoy a massive asymmetric advantage where defenders must maintain perfection forever, while operatives can bypass local encryption using hardware firewalls and hidden partitions.
8. Adversarial machine learning perturbations and custom glasses patterns can blind brittle facial recognition systems by tricking algorithms into misidentifying human faces.
9. Technology alone cannot stop tyranny or replace consensual democratic government, but it can provide temporary shelter while mass mobilization drives structural reform.
10. Relentless public protests, civilian harriers targeting police drones, and political action can successfully overthrow oppressive regimes and dismantle surveillance architectures.