Hledat v komentářích
Investiční doporučení
Výsledky společností - ČR
Výsledky společností - Svět
Týdenní přehledy

Detail - články
Clearfield: A Hacker’s Market?

Clearfield: A Hacker’s Market?

09.04.2013 13:10

Never in the history of written communication could 140 characters have the impact that they can have now. Two weeks ago, after gaining access to the Associated Press’s main Twitter account (@AP), the Syrian Electronic Army (SEA) posted a fake tweet reporting two explosions in the White House and the injury of President Barack Obama. Within seconds, US financial markets dropped by about 1%.

Minutes later, Twitter was abuzz with refutations. Reporters at the White House tweeted that they felt no explosion, and AP reporters and the AP Politics Twitter account announced that @AP had been hacked. At his afternoon briefing, White House press secretary Jay Carney confirmed that Obama was indeed unharmed. Financial markets returned to their pre-hoax level.

The @AP Twitter hoax represents systemic risk that cannot be eliminated, for it arises from the interaction of highly integrated financial markets and increasingly democratized news delivery. Given strong incentives for malicious parties to perpetrate such hoaxes, we should expect to see an increase in incidents.

Financial markets are vulnerable to manipulation, because they are not in the business of evaluating the truth. Trading often favors first movers, so being fast but wrong can still be profitable.

Imagine that a sophisticated trading firm has invested significant resources to develop an algorithm that quickly evaluates the potential market impact of news, and then automatically sends orders to trade based on that predicted impact. When that algorithm parses a tweet from the AP containing important keywords (explosion, White House, and Obama), it will send orders to sell with the expectation that the market will drop as others – first, slower algorithms, then even slower humans – start to process the same news.

The first mover is happy to make such trades without verifying that the news is true. If it is true, the market will stay down or continue dropping, and the first mover will profit from the sales that it has made. If the story is a hoax, the market will probably return to its earlier, fairly valued level, and the first mover will break even on its sales, and possibly profit from any position purchased as a hedge when the market was down. The first mover’s algorithm worked, regardless of the story’s veracity.

The likely losers in the @AP Twitter hoax were later movers who did not react quickly to the news, but reacted instead to the market’s movement. These late movers were also likely to have been sophisticated electronic or institutional traders; some were probably using arbitrage-based strategies that relied on the futures market for a calculation of the fair price.

The market’s vulnerability to hoax stories is thus difficult to eliminate, for it is inherent in its structure. It cannot be regulated away or fixed by technology or surveillance.

Even if markets moved more slowly, there would still be a first mover who responded before such a news story was revealed as a hoax. This dynamic is similar to that of an asset bubble, albeit faster. In a bubble, valuations are based on collectively evaluated evidence, and those who enter the market earliest often benefit. Whether evaluating an assumption about the rise of house prices or whether a news story is true, the market does not provide a definitive answer instantaneously.

If protecting against hoaxes is not the market’s purview, can news agencies or new media entities like Twitter prevent such deception? To be sure, they have suffered reputational damage from this fiasco and will likely try to improve. But their efforts will not be enough.

Twitter’s vulnerabilities were technically understood before this event, and the service was already moving toward a more sophisticated authentication model (a password paired with a one-time key from a text message or other device). Twitter will likely implement this soon. It should also consider adding an optional “two-key” system, in which an independent signoff from a separate account is required before a proposed tweet is broadcast. But, while such measures would increase the difficulty of hacking the system, no technological fix can make it impenetrable.

What about the AP’s vulnerabilities? Attackers launched a “phishing” attempt against the AP’s emails shortly before the hoax tweet was sent. Phishing attacks, in which an employee is duped into sending a password to a third party or clicking an untrusted link that installs malicious software, represent a hybrid of cultural and technological failures.

As attackers become more sophisticated, they send better-crafted emails, sometimes impersonating trusted sources that lure unwary users. Crafting a culture of security is difficult and often at odds with the dynamic and decentralized work environment of a fast-moving newsroom.

As technologies change, so must awareness of vulnerabilities, and this awareness must be disseminated through means other than corporate memos that are disconnected from day-to-day business realities. Empirically, few firms get this right: America’s National Public Radio and the BBC were both recently hacked by the SEA, while McDonald’s and Burger King recently had their Twitter accounts compromised. The proliferation of security lapses means that people are more likely to shrug their shoulders than to cast the first stone at a company that is breached.

Finally, the AP is unlikely to face financial penalties for this mistake. A lawsuit for losses stemming from the hoaxed tweet would face nearly insurmountable obstacles.

Because few mechanisms can prevent the proliferation of hoaxed tweets, and given the high-profile response that successful hackers can expect, Twitter will remain a vehicle of malicious hoaxes, even as technological barriers make attacks more challenging. Indeed, the SEC recently approved the use of social media like Facebook and Twitter for publicly traded companies’ disclosures to investors. Imagine what might happen if @BP_America tweets: “#Explosion reported at Gulf well. Details to follow.”

The incentives to try to hack such accounts are obvious: not only significant publicity for hackers, but highly lucrative profit opportunities from the almost inevitable stock-market movements that will result. On Twitter, as elsewhere, caveat emptor.

Chris Clearfield is a principal at System Logic, an independent research and consulting firm that focuses on issues of risk and complexity. András Tilcsik is an assistant professor of strategic management at the Rotman School of Management at the University of Toronto.

Copyright: Project Syndicate, 2013.

Váš názor
Na tomto místě můžete zahájit diskusi. Zatím nebyl zadán žádný názor. Do diskuse mohou přispívat pouze přihlášení uživatelé (Přihlásit). Pokud nemáte účet, na který byste se mohli přihlásit, registrujte se zde.
Aktuální komentáře
14:05Trump umocňuje útok na čínské technologie, zakazuje WeChat a TikTok
13:49CNN: Výbuch v Bejrútu ohrožuje ekonomiku, která již byla v krizi
12:49ČEZ vede jednání o prodeji rumunských aktiv. Prý s Macquarie
12:15Perly týdne: Akcie nad zlato, podivné investiční rekordy a u nás diskuse o bankovní dani
11:37Kodl Contemporary posílá současné české umění do věhlasné Sotheby’s
10:33Martin Cakl: O2 překvapila lepšími výsledky  
9:54Ve službách se začíná blýskat na lepší časy (komentář analytika)
9:13Rozbřesk: ČNB znovu zhoršila výhled české ekonomiky
8:56V Praze odreportovala 02, Trump stupňuje tlak na TikTok. Evropa nerozhodná  
8:31Uber kvůli koronaviru ve čtvrtletí vykázal ztrátu 1,8 mld. USD
8:26Microsoft má zájem o veškeré aktivity TikToku mimo Čínu, Trump zvyšuje tlak na odprodej
7:04O2 v pandemii covid-19 meziročně uhájila příjmy a dokázala zvýšit zisk i marži
22:05Wall Street zakončila pátý den v řadě v plusu, v čele technologie  
20:52Co čekat od výsledků O2? Mírný meziroční pokles v důsledku covid-19 u hlavních čísel  
17:31Trh jako v roce 2000? Jen na povrchu
17:13Zlato poráží další rekord nad 2000 dolary, někteří varují před korekcí
16:57Wall Street a Evropa se na směru neshodují. Koruna slábne s novou prognózou ČNB
16:21Žadatelů o podporu v nezaměstnanosti v USA za týden citelně ubylo
15:45Komentář analytika: Nejostřeji sledovaná položka výsledovky posílá akcie ING a Unicredit opačným směrem  
14:37ČNB sazby nemění, zhoršuje odhad hospodářského propadu. Koruna na denním dnu

Související komentáře
Nejčtenější zprávy dne
Nejčtenější zprávy týdne
Nejdiskutovanější zprávy týdne
Kalendář událostí
Čína - Obchodní bilance, mld. USD
14:30USA - Míra nezaměstnanosti, s.a.
14:30USA - Průměrná hodinová mzda, y/y
14:30USA - Změna počtu prac. míst