Fetching from the wire…
Public story · 2026-07-16 · high
Identity shielding doesn't stop social inference, argue Leo Richter and Matt Kusner, who propose plausible-deniability guarantees instead.
Why now: The paper posted to arXiv in July 2026 and is current as of July 16, 2026.
Leo Richter and Matt Kusner propose a formal privacy framework for whistleblowers built around plausible deniability rather than identity shielding, per a paper posted to arXiv. The distinction matters for anyone building internal reporting, audit-log redaction, or anonymous feedback tools. A report can have the name stripped out and still leave only a small group of people who could plausibly have sent it.
Existing legal and technical protections fail, the paper argues, because retaliation risk survives even when identity is nominally shielded. Identity shielding assumes an attacker trying to decrypt or de-anonymize a record. Plausible-deniability guarantees assume an attacker reasoning socially, narrowing down who could have filed a report by who had access to it.
That reframes the engineering problem. Instead of hiding one identity, the system needs enough plausible candidates that no single person stands out as the source.
The paper doesn't say what enforcing these guarantees costs in engineering terms, or how it would change existing audit trails. I'd want that answered before wiring this into a compliance tool. Even without it, the framing changes the design question to how many people could plausibly have sent the report.
Each link below shares sources, entities, or timing with this story.
Shared entity: Rare / Same source domain / What happened next / Tension
Both cover Rare; reported by the same outlet (arxiv.org); picks up the Rare thread on 2026-08-12.
Same source domain / Shared topic
Reported by the same outlet (arxiv.org); overlapping topics (feedback, formal, framework, guarante).
Shared entity: Rare / What happened next / Tension
Both cover Rare; picks up the Rare thread on 2026-07-22; pushes against this story (against).
Same source domain / Shared topic
Reported by the same outlet (arxiv.org); overlapping topics (fail, formal, framework).
Shared entity: Rare / What happened next
Both cover Rare; picks up the Rare thread on 2026-08-11.
Both cover Rare; picks up the Rare thread on 2026-08-07.
Both cover Rare; picks up the Rare thread on 2026-08-05.
Same source domain / Shared topic
Reported by the same outlet (arxiv.org); overlapping topics (fail, feedback).