I. "Hey Anna, do you like pizza?" I was just sitting down to dinner one evening this past November when I looked through some new Twitter notifications on my phone. My night, I realized regretfully, was about to get very, very stupid.
The Twitter user was named "Davidkalac69," the photo a white egg on a purple background. Over the next few minutes, he tweeted at me a few more times:
"Are you vegan/vegetarian?"
"anna please respond these questions are very important"
"for gods sake anna I'm not asking much"
And finally:
"lets trigger some bitches"
A few minutes before the tweets started, I had gotten an email from Domino's, letting me know that my pizza order was ready, payable with cash upon delivery. I'd shrugged it off as a glitch in their ordering system. I hadn't ordered a pizza, and the address listed on the order was an apartment I hadn't lived in for a while.
Now I looked at the Domino's email again. It was completely nuts: Two large pies, one with triple cheese, triple sausage, triple salami, triple barbecue, hot sauce, half onions and half pineapple, the other with no cheese and triple sausage, plus a large bottle of Coke. Nothing I—or anyone with functioning taste buds—would ever order. The total was nearly $50.
I snorted with disbelief: I was being 4channed.
At this point, you've almost certainly heard of 4chan, specifically /b/, an anarchic message board and troll haven known for pulling pranks. Sometimes they're pretty funny: hijacking a Mountain Dew poll to name a new drink "diabeetus," gaming an online contest to send cheesy rapper Pitbull to Alaska. (Important note: while 4chan appears to have contributed to the voting on that contest, the actual people who came up with the prank, Boston Phoenix writer David Thorpe and Something Awful's Jon Hendren, are in no way affiliated with 4chan). Sometimes they're cruel: /b/ users famously mocked the family of a kid who'd committed suicide, sometimes calling his parents pretending to be him and taunting them: "Hi, I'm Mitchell's ghost, the front door is locked. Can you come down and let me in?" Sometimes they're dangerous: In 2012, their pizza-pranking led them to send a delivery person to where Chris Dorner, the ex-LAPD cop on a killing spree, was barricaded.
And sometimes they're criminal: 4chan is where hacked nude photos of various actresses were posted this summer. It is also where a Washington man confessed to murdering his girlfriend this past November and posted pictures of her nude, garroted body.
The name of that confessed killer was David Kalac—the name the pizza lover had chosen to tweet at me.
It was a blog post I'd written earlier in the day that drew /b/'s attention. Its users had been flooding Time magazine's annual reader poll of words that should be banned, voting for the word "feminist." I'd written up their ballot-stuffing efforts and called the board (gently enough, I thought) "the Internet's home for barely potty-trained trolls."
So now I was getting to see them in action. In a few minutes, someone who wanted to warn me sent me a link to where the 4Chan crowd was rowdily discussing their plans for my evening. (Over the course of the night, they kept nuking their threads and creating new ones, three or four before the night was over.) They were racking up food orders: sushi, Chinese food, Middle Eastern, orders usually totaling $60 or $70, all of them payable on delivery. Many people posted their receipts.
A lot of the food had bacon or ham in it. I'd wondered why, then realized I've tweeted in the past about being Jewish. (I'm not observant and pork products don't shock me, but they didn't know that.) When the food orders got boring, /b/ considered other ideas: Should they send me vacuum cleaners? ("That's not even a shit gift," someone complained.) Sign me up for tons of mailing lists? How about rape?
One of them decided he should post a Craigslist Casual Encounters ad, to get people to come to my house for sex, preferably "large black men."
"Tell them she's into serious rape roleplay," someone suggested.
"I would seriously rape her," another volunteered
"Actually raping her is a little much, anon."
It was good to know they had a floor. Not much of one, though. Pretty soon, they settled on their favorite idea yet: swatting. That is, they wanted to make a fake distress call to get the police, the fire department or—best of all—an entire SWAT team called to my house, expecting an armed confrontation.
"Someone from NY, send the police her address (say she is planning to shoot a school to support feminism) and make it snappy."
"Someone said they called the PD from a payphone in California and they just laughed at them."
"We need to get sand nigger food to her house first. We want the cops to freak out and start shooting."
I emailed my editor and Gawker Media's lawyers, who suggested I call the police. I called my local precinct in Brooklyn, who told me I'd need to come in to file a report. I was most worried about the people living in my old apartment and asked if someone could do a welfare check there, but an officer told me that wasn't possible. I checked Twitter accounts for the police scanner and the FDNY a few times to make sure there was no major disturbance in that neighborhood. Seeing nothing, I decided to leave going to the police for the next day.
I also checked Craigslist briefly for posts about giving an unwilling Jewish writer the raping of her life, but didn't see anything there either. By this time, someone had jumped into a thread pretending to be me: "I have some friends who know their fair bit about hacking. Get ready for your IPs to be backtracked and sent to the Internet Police."
An hour passed. 4Chan started getting restive.
"More then 2hours and no tweet about all the shit weve [sic] done," one complained. "Is the bitch dead?"
"Probably buried under a pile of pizza boxes," someone else suggested.
Around midnight, they gave up. I went to bed, waking up in the night to reach for my phone and look at my Twitter mentions one more time.
"I'd like to rape you" a new message read, from another egg. Half-asleep, I took a screenshot, blocked him and went back to sleep.
II.
At this point, so many female writers have been threatened online that it's spawning its own new type of journalism; call it "harassment lit." There's Amanda Hess, who was vacationing in Palm Springs when a man tweeted that he had a previous conviction for manslaughter, and was coming to her house to "rape you and remove your head." There's Rebecca Watson of the science blog Skepchick, threatened by a commenter who lived three hours away and had a previous conviction for domestic violence. There's feminist journalist Jessica Valenti and programmer Kathy Sierra. There's former Jezebel writer Lindy West, who recently interviewed one of her most vicious trolls on This American Life, and Gamergate target Anita Sarkeesian, who recently posted just one week's worth of her Twitter mentions, a cavalcade of cruel, violent, degrading insults and threats.
You don't even have to have written extensively about feminist issues: Kelsey McKinney, a reporter for Vox, started getting threats after she wrote one piece about the celebrity nude photo hacks. It's never really subsided.
"I am threatened with rape, mutilation, and physical harm more than ever thought I would be," she wrote in an email. "I get emails that describe how the writer wants to find, rape and murder me. I get emails that have my head photoshopped onto porn stars bodies, or dead animals, or brutally hurt women." She gets two or three a week, usually under innocuous subject lines like "Read your piece" or "Just saying hello."
Then comes the part of the harassment lit story where you go to the police and nothing happens. ("What's Twitter?" the responding officer asked Hess). McKinney called the cops after someone sent her a photo of the house she'd grown up in. "I haven't lived there for years and my parents have since moved, but it was terrifying."
It was not terrifying enough to interest law enforcement. "They told me they couldn't possibly know what the picture meant," McKinney said. "I told them it was obviously a threat meant to intimidate me. The officer on the phone told me to calm down. I could not calm down. Since then, I don't bother calling."
Now it was my turn to try the police. The morning after /b/ had deluged my old apartment in takeout, I went with Kavi Reddy, one of Gawker Media's attorneys, to the police station near our offices in NoLIta. I went partly out of caution, and partly out of curiosity: in situations like mine, what options did female writers even have? I brought a notebook and some screenshots of the 4chan thread.
Right away, the situation proved difficult to explain. "I think I've heard of 'em," Officer Rao, the NYPD officer who met us at the front desk said of 4chan. He'd heard about the naked actress photos. He frowned. "But do we know where they physically are? We need physical locations."
We didn't know where they were, we explained.
"Who's the perpetrator?" he asked, trying again. "Who's the one doing this?" He looked at my screenshots and shook his head. "What's the point of this?"
"To harass me," I told him. "And to prove they know where I live. To scare me."
Rao nodded. The situation, he told me, was difficult because "it's not cut and dried, like, you know, we dated, then I call her up and threaten her. There'd have to be IP addresses pulled."
We'd filed another report only a few months back at the same precinct, for another Jezebel writer. Reddy asked if Rao could pull it up. He turned on the computer and patiently waited for it to load. He searched the writer's name, waited some more. Suddenly, he reached over, grabbed the cords connecting the computer to the wall and gave them a hard tug.
"You gotta shake them every once in a while to make it work," he told us apologetically.
In the end, Rao told me I'd have to go to my home precinct in Brooklyn to file a report, since I had received the threats at home (That is, I'd been at home on my laptop when I read them).
"I don't want to take the report and have it get pushed aside," he explained. "It's stalking and aggravated harassment. But with an unknown perpetrator, we'd have to close it right away."
Reddy asked if he could call the precinct where my old apartment was located and make them aware of what was going on, something the NYPD has been able to do in similar situations with Gawker writers in the past. Rao said it would be better if we sent the new residents a letter.
I got to my home precinct around 8 p.m. that night. (I'm not identifying the precinct in the event that it might make it easier to find my address.) The station was empty except for two police officers at the front desk and a senior police administrative assistant in a side room, a woman in her 60s, who looked at me sourly when I tried to explain why I was there.
"Have you heard of 4chan?" I asked.
"No," she said. Her radio was playing an oldies station at top volume. She didn't bother to turn it down. She looked at me skeptically as I tried to explain what had happened, her mouth twisted. It occurred to me that she probably thought I was mentally ill. I handed her the screenshots I'd taken of the /b/ chatroom and pointed out the words "rape" and "swatting."
"I have to show these to a detective," she said.
"Okay," I replied.
"You can't come with me," she added sharply. I hadn't moved.
She was gone about 20 minutes; when she returned, she had a Detective Hunt in tow.
"This is, at most, harassment," he told me. "It doesn't take a genius to figure this out. It's more bark than bite. And anyway, these are Canadian phone numbers and we can't trace them." He was referring to some links embedded in the chat, which did sort of look like phone numbers, in that they were strings of numbers.
If anything else happened, Hunt said, "You can always come back and file more." In the meantime, he added, "Just don't go on those websites."
I asked if someone would be able to go to my old apartment and make sure whoever lived there was all right.
"They have to file their own report," Hunt said. He added that the officer who didn't want to take my report in Soho was "probably just lazy."
The administrative aide allowed me to fill out a report for aggravated harassment. She declined to give me her name, telling me it would be available in my police report. (I was able to find her name, but won't print it here—to protect my own privacy , not hers.)
I got my report last week; in my statement, I'd written about three-quarters of a page, detailing the food orders as well as the threatened swatting and rape. Here is what the administrative aide wrote down:
The victim stated that she had been receiving annoying and harassing messages via twitter, email and 4chan wedste [sic]. The victim was sent an order of food at her previous address.
Elsewhere on the report, my first name was misspelled.
III.
In the end, what happened to me wasn't a particularly big deal: it was a single night, and has yet to repeat itself. But there's nothing to prevent it from happening again, and when it does, my options will continue to be pretty bad, even with a powerful media company and talented attorneys behind me.
Technically, threatening someone online is just as illegal as doing it over the phone. But in practice, it's been hard for cops and courts to separate what constitutes a true threat online from what's protected as free speech. The Supreme Court is preparing to take up the case of Anthony Elonis of Bethlehem, Pennsylvania, who was convicted of making threats across state lines, a federal crime.
Elonis wrote a series of Facebook posts—"rap lyrics," by his account—in which he fantasized about killing his ex-wife. One said he "wouldn't rest" until she was dead, "Soaked in blood and dying from all the little cuts." Later, after she'd gotten a protective order, Elonis wrote: "Fold up your protective order and put in your pocket. Is it thick enough to stop a bullet?"
He also posted about being ready to "make a name for myself" by shooting up an elementary school. After a female FBI agent visited him at home about that one, he wrote a new lyric about her:
Little agent lady stood so close
Took all the strength I had not to turn the bitch ghost.
Pull my knife, flick my wrist, and slit her throat.
Leave her bleedin' from her jugular in the arms of her partner.
Elonis appealed his conviction, on the grounds that he had merely been expressing himself. Although he only started claiming his Facebook rantings were "rap lyrics" after the FBI got involved, his case still captures the knotty questions about online harassment: What is free speech? What's an actionable threat? How do we draw the lines to protect speech, but also allow some legal recourse for people who are being terrorized?
The best overall guide we have is the "true threat doctrine," which defines threats as statements that "a reasonable person would interpret as a real and serious communication of an intent to inflict harm." But that's vague, to put it mildly, and it has been inconsistently applied by different courts. Danielle Citron, an attorney and law professor who has called for better enforcement of online harassment laws, says she hopes the Elonis case will clarify what a "true threat" actually means.
"We bend over backwards in the United States—and we should—to protect and provide breathing space for free speech of all sorts: offensive, profane, irritating," she says. "We want to provide breathing room for public conversation. But when it comes to expression whose raison d' etre is to silence other people, to ruin reputations, to terrorize, we should be less anxious about silencing that."
What counts as being terrorized? The culture around 4chan is willfully obtuse on that point. Sending pizza is a prank, right? A prank that demonstrates you know (or think you know) where your online target lives in real life. Then you choose to send the pizza under the name of someone accused of an actual murder—someone who was a participant in your own online community. The victim was sent an order of food. The real David Kalac apparently had believed the audience for lulz would appreciate seeing his girlfriend's dead body. What did the fake David Kalac believe?
At some point, you have to consider the numbers. I'd been working in alt weeklies for years before I came to Jezebel in October 2014, and nothing had prepared me for the volume of harassment that comes with joining "women's media." Individual writers and the Jezebel staff as a whole get both threatened and deluged with foulness on a regular basis; Gawker Media redesigned our commenting system last year to deal with an onslaught of violent images in Jezebel's comments, many of them involving female corpses and depicting unspeakable violations.
So most of the abuse is online. Most of the incursions into offline life stop with delivery food. If you're not facing the harassment firehose, as most male writers aren't, it's easy to stop thinking about it there. Earlier this month, someone at Gawker Media leaked a copy of the office seating chart to the Awl—a little piece of media gossip, that, to the Jezebel staff, meant giving potential psychos a map to where we sit. (The leak was an even odder decision given that the men of Gawker Media have gotten their own share of threats.)
The police are particularly disinclined to view online threats as urgent. Even without Elonis being decided yet, there are pretty good harassment and stalking laws on the books in most states that could be used to prosecute people who make clear threats online. But something about the online environment makes police lose interest.
Brianna Wu, one of the primary targets of Gamergate, told me she has been showered with alarmingly specific threats. "They're saying who, what, where, why, when," she said. "They said I was going to be on the front page of your site when they murdered me."
"I had someone last week that made a video talking about how they're going to murder me," Wu added. "This is not just, 'I'm going to kill Brianna,' this is like a multi-minute rant about why they want to murder me, how. Their face is visible in the video. I have their name and testimony from the people who know them and how unbalanced they are. This person lives 15 minutes from my house."
Wu called the police, which she's had to do numerous times since Gamergate blew up. To her amazement, even this particular threat hasn't resulted in an arrest.
"This is what I want to emphasize for you—as much as you can have something going for you with death threats, I do," she said. "I have a very high profile case. There's so much media attention. I have the ear of the police. They have every reason to want to solve this crime, but at the same time nothing has happened, even giving them as much as information as I have."
Zoe Quinn, the game developer who was the original focus of Gamergate's outrage, has had similar experiences. "Think GG is hard to explain to a friend?" Quinn wrote in a recent blog post:
Try a legal system that doesn't really understand what the internet is yet— it's like trying to push cooked pasta through the eye of a needle. Try explaining shit like 4chan to an officer who types with henpeck hands and getting handed a police report that makes you feel like praying the abuse away may be more effective. Law enforcement is prepared for familiar things like 'here is a death threat, here is someone violating a restraining order, here's where they openly discuss wanting to rape me,' but trying to convey how things work online is frustrating.
IV.
This is the usual lesson: The police are helpless in the face of the mixed signals and technological complexity of online threats. Except they aren't—especially not when the threats are against police officers.
After a Baltimore man killed two New York police officers in December, accompanying his crime with a spree of Instagram posting, law enforcement wasted no time before moving against online antagonists. The NYPD said it combed "hundreds" of online messages and 911 calls, eventually arresting nine men for threats.
Some of the men threatened officers in person or on the phone; one posted "pictures of weapons" to his Facebook page, according to police, and statements indicating that he wanted to kill cops. Another was arrested after he was overheard on his cellphone talking about wanting to kill police. A man in suburban New York was also arrested for posting images on Instagram and Facebook there threatening police.
In the same week, 17-year-old Fort Worth resident Montrae Toliver was arrested for making a terroristic threat after he posted a photo of a gun pointed at a parked police cruiser on Twitter. It bore the caption, "Should I do it? They Don't Care For a Black Male Anyways." The FBI arrested Jeremiah Perez of Colorado Springs for a YouTube comment which read, in part, "WE VETERANS WILL KILL RETIRED HELPLESS COPS."
The court documents relating to the arrest of Perez detail just how quickly law enforcement agencies can act when they want to: Google+ sent an emergency request to the FBI after seeing Perez's YouTube comment. The request read in part, "[T]here presently exists an emergency involving imminent death or serious bodily injury to a person or persons, and that immediate disclosure to you of certain information is required to avert the emergency."
In a matter of days, the FBI contacted Perez's internet service provider, started physically surveilling his house, ran his license plates, pulled his military records, executed a search warrant, and arrested him.
Local police are likewise able to move quickly when motivated: One of the men arrested for threatening NYPD officers was 26-year-old Jose Maldonado, who according to ABC news had posted "Might just go out and kill two cops myself!!!" on his Facebook, along with pictures of the slain officers and photos of a TEC- 9 and a MAC-10. He was contacted by police that day and surrendered at the precinct that evening.
In a statement at the time, the NYPD said they'd received about 40 threats and determined about half weren't credible, adding, "All threats against members of the NYPD are taken seriously and are investigated immediately to determine the credibility and origin of the information."
Last week, the NYPD made yet another quick arrest, of a 17-year-old boy named Osiris Aristy. They accused him of making terroristic threats against the police by posting gun emojis pointing at cop emojis, along with statements that reportedly included ""N***a run up on me, he gunna get blown down," and "Fuck the 83 104 79 98 73 PctKKKK." Here, the ambiguity of online communication was not a problem.
Even the anonymity of 4chan hasn't prevented local police from being able to arrest a threat-maker: in Harrisonburg, Virginia, police arrested 24-year-old Joshua James Mitri in October after he posted a message on a 4chan board saying he was going to shoot up an elementary school.
V.
Why is it that the police can fairly easily track down people threatening them in YouTube comments, but seem unable or unwilling to do so for other people being targeted?
Danielle Citron, the attorney who's pushed for better enforcement of harassment laws online (she's written an entire book about it, Hate Crimes in Cyberspace), pointed out that that shouldn't be the case, especially in New York and Los Angeles.
"LA has a threat assessment unit and NYPD has a counterpart," Citron said. "They have statistics they gather around aggravated harassment. New York City has awareness tools and fusion centers," meaning places where multiple law enforcement agencies share space and information—the NYPD, the U.S. Attorney, the Department of Homeland Security, the Drug Enforcement Administration.
"They're trying to go after terrorism and national security efforts," Ciron said. "You are the most networked and most surveilled city in the country. But it's mind-boggling that we can't turn any of these technologies to help people who are threatened, harassed stalked, terrified."
The NYPD and the FBI also teamed up earlier this year to form a federal cyber-crime task force, the National Cyber Investigative Joint Task Force, pledging to monitor "modern day cyber threats." But it seems to be focused mostly on potential terrorism and threats to the public transportation infrastructure; it's pretty clearly not the right place to report a threat against an individual.
Citron argues that local police, not the FBI, are really the ones who should be enforcing harassment laws, and doing a better job of it.
"State and local police have always been the home of stalking and harassment laws," she said, and it's primarily state and local police who should be enforcing them better. "It's not that we don't have federal cyberstalking laws—it's fantastic, it could be a model for states." That's Section 2261, Title 18 of the U.S. criminal code, which bans interstate stalking, harassment and domestic violence.
"It's a very helpful statute," Citron said—that is, when federal law enforcement agencies choose to use it. "The problem often is that they often say, 'We're in the business of worrying about murder and terrorism, we don't enforce cyberstalking laws.' But when you look at FBI statistics, the most investigated crimes are drug crimes and larceny property, like when you steal someone's car. The idea that we're too busy at the federal level investigating terrorism and murder is untrue. The statistics belie that."
In a statement, FBI press officer Emily Yeh told Jezebel,
If someone feels they have been a victim of crime, or a target of a threat—whatever the method the threat was made—they can report it to any of the FBI's 56 field offices. There are several ways an individual can report the crime as well. They can call, email, or walk-in to their local field office; location, contact information, and hours, of all our offices are on fbi.gov. They can also report a crime to their local law enforcement. The FBI encourages those who believe they are a victim of a crime to report that crime.
The FBI will address each reported incident on a case-by-case basis, investigating the totality of facts and circumstances to determine if there is sufficient credible evidence to make an arrest and proceed with federal charges. Again, it would not be appropriate for me to provide more information at this time. If charges are filed, they will eventually become a matter of public record.
At the local level, the biggest problem, Citron said, starts with a lack of technical skills and training for law enforcement officers at the local level. "The police response comes from a place of intimidation. The technology just intimidates people, and when police officers are intimidated, they say, 'Turn it off and ignore it.'You have officers who mean well, but they do not understand the technology and they aren't well-trained in the laws."
There's also the fact that harassment laws that often require a threat to be made directly to the person, not on a third-party website, as happened to me and many others with 4chan and 8chan.
"There are laws on the books in, let's say, half the states, harassment and stalking laws, that cover abuse on third-party sites," Citron said. "But a lot of them require one to one communication. New York's aggravated harassment law, if a man puts a nude photo of his ex on Twitter and doesn't send it to her, it wouldn't 'harm' her," and he wouldn't be committing a crime."
Another issue, she adds, is the wording of stalking laws in many states, which Citron says "have become outmoded— a lot of them talk about 'lying in wait,' things that require a physical presence."
Your civil alternatives also aren't very good. "There are of course civil claims that individuals could bring if they could figure out who their harassers are and they had resources to sue," Citron says. If you're not a public figure, you can sue for intentional infliction of emotional distress (the bar is higher for public figures, or people who have been in the news—i.e. anyone whose name is mentioned in this story).
But besides the prohibitive cost of a lawsuit, Citron adds, the "the perpetrators are often judgment-proof"—meaning broke. "When you have very little to lose, you don't give a shit."
VI.
What options does that leave people who are being harassed? Nadia Kayyali, an activist with the Electronic Frontier Foundation, suggests "surveillance self-defense," a system of keeping safe that involves "threat modeling"— running through potential threats to see how safe your information is and whether your device security is solid enough. It's a good way to make sure, for example, that you're not inadvertently telegraphing your physical location through social media.
And there's "counter speech," using the same online tools that are sometimes used to harass—like Twitter—to call attention to and condemn abusive behavior. "That goes to the strength of the internet," Kayyali said. "Part of the strength and weakness is what an amazing medium for communication it is. And sometimes that means an ugly vile message gets amplified much quicker. But it also means we can use that strength to respond."
Brianna Wu has employed a mixture of all these techniques to try to stay safe; she also recently started offering a $11,000 reward "for identifiable information leading to the prosecution of people sending me death threats." (We may see more law enforcement action soon: Earlier this year, journalist Michael Morisy filed an open records request with the FBI requesting its files on Gamergate and got a form letter back denying his request, because of an "pending or prospective law enforcement proceeding." FBI spokesperson Emily Yeh tells Jezebel, "In regards to Gamergate, absent the filing of formal charges or for a law enforcement purpose, I cannot confirm or deny the existence of an investigation. Therefore it would not be appropriate to provide further comment on this matter at this time.")
Wu doesn't really see Gamergate ever ending. "I think it's been discredited, but I think it's always going to exist. And that's the sad reality of being a woman in the games industry in 2015."
Quinn, too, says she's adjusting reluctantly to her new version of normal. "It's been trying to accept and internalize that, and then figure out how to fight back and make sure this doesn't happen to anybody else," she says.
Quinn recently launched an anti-swatting task force called Crash Override, which seeks to help people protect their information to prevent doxxing and swatting, by helping them pull their personal information from online databases, by encouraging them to put in place things like two-step verification to make it harder to hack their emails, and to keep them physically safe and their information as protected as possible in the event that it does happen. She's also writing a book about her experiences.
"It's been really hard to accept that the life I had before this is over," she says. "But that's just the reality of the situation."
Illustration by Jim Cooke.