Feature:

File/Link Sharing

Definition: The capacity of one user to publish or share files or links with other users.

While much of the internet's functionality can be represented in the browser through images, text, and video, file and link sharing are an essential component of online platforms that enable collaboration, aggregation and organization.

Of primary concern with link and file sharing is the way that extracting content out of a browser exposes the user to additional risks that the perimeter of a browser and the platform usually constrains, first and foremost being Malware and its sub-variants. But file sharing also brings along with it other risks, like the storage and distribution of illegal material like CSAM, and the abuse of storage capacity.

Files and links might seem at first to be distinct categories of ideas, but since links can be used to initiate a file download from a browser automatically, integrity issues around links can be viewed as a superset of integrity issues around files. Links also have two wrinkles to them that complicate their effective moderation. Firstly, the owner of the linked-to-page can change where a link goes or what it shows dynamically, without changing the link's value (i.e. a link to "bestofbuys.co" could redirect to Best Buy today, and a malware site tomorrow). Secondly, the linked content may go to a page which violates the community standards of the platform, but this leaves platforms in a tricky spot - should a platform try to enforce their standards outside of their territory by not showing links to sites that show content that is against their Terms of Service, or should they allow this one-click sidestep of their rules?

Unfortunately, there aren't easy answers when it comes to links and files, but a few small interventions can help limit the surface area that platforms leave open for harm.

Potential Interventions

No E2E Encryption
When content is end-to-end encrypted, platforms can offer no content-based protections.
Don't support large files
Large, high quality, high volume uploads are both risky and expensive.
Save Extensive Metadata
Recording extensive metadata about sensitive activity can reduce criminal appeal.
Perform basic link vetting
Run basic validation on the contents that something links to before showing the link to the user.
Subtly Modulate Uploads
Features that provide exact replicas of the data in are ripe for abuse.
Label/Detect Identical Content
For some features, duplicate data suggests misuse.
Right-size content visibility
Place limits on the amount of harm content can cause on a platform by restricting its reach.
Warn Before Risky Action
Use signals about affinity and content to occasionally warn the user about what they're about to see/download/visit.
Reporting Mechanisms
Allow users to flag content or behavior that they find to be abusive.
Media Provenance
Record and display the chain of custody and original source for media.
Crowdsourced Metadata
Allow users limited access to content metadata, and enable them to highlight this on the posts of other users.
Is something missing, or could it be better?
Loading...