The Vergecast
The Vergecast

Former chief security officer of Facebook Alex Stamos

Nilay Patel interviews Alex Stamos, director of Stanford's Internet Observatory and former chief security officer for Facebook. Nilay and Alex talk about how Cambridge Analytica changed Facebook, the tradeoffs big tech companies make with working with law enforcement and keeping users secure, a

Featured Speakers

Vox Media Podcast Network HostAlex Stamos Guest

Topics Discussed

Episode Summary

Executive Summary: Alex Stamos argues that online safety, privacy, and misinformation are now inseparable tradeoffs for platforms. He says the biggest failure is not just tech, but also government and media misunderstanding the incentives and responsibilities behind content moderation, encryption, and election integrity. He advocates for more transparency, better trust-and-safety infrastructure, and treating these problems as an emerging industry.

Main Topics: Stanford Internet Observatory’s mission (Priority: 5/5): Stamos explains that the observatory builds tools and training so non-computer-science fields can study internet effects without recreating data infrastructure from scratch. Election interference and 2020 preparedness (Priority: 5/5): He breaks down 2016 interference into meme warfare, hack-and-leak, propaganda, and election infrastructure attacks, arguing the ecosystem is better prepared now but not fully safe. Privacy vs. safety tradeoff (Priority: 5/5): Stamos argues that end-to-end encryption and private messaging reduce abuse visibility and moderation ability, creating real gains for privacy but also for bad actors. Trust and safety as a new discipline (Priority: 5/5): He says abuse prevention is the main online harm and should be taught, staffed, and operationalized like cybersecurity was in the late 1990s. Platform scale, moderation, and future industry structure (Priority: 4/5): He predicts trust and safety will become a service layer similar to cloud infrastructure, with centralized experts supporting smaller startups and platforms. Company-by-company readiness (Priority: 4/5): He compares Twitter, Google/YouTube, and Facebook on transparency, staffing, and product design, ranking Facebook as strongest overall but still challenged on Instagram and WhatsApp. Media criticism and accountability (Priority: 4/5): Stamos says media outlets often miss tradeoffs, over-interpret platform actions, and fail to reflect on their own role in amplifying disinformation during 2016.

Key Arguments: The internet now requires specialized observation and tooling; academia should not have to reinvent measurement infrastructure for each study. 2016 interference exposed a blind spot because propaganda was treated as a cybersecurity issue by almost nobody; today, governments and companies have dedicated teams. Privacy and safety are in tension: encryption protects users, but it also shields abusive actors and makes detection harder. Platforms already use hidden forms of machine learning moderation; encrypted futures would reduce some of those protections unless client-side safety tools are added. Trust and safety should be embedded in product decisions early, because initial product choices create most downstream risk. The field is mature enough that universities should teach it and startups should not assume they can launch user-generated products without understanding abuse patterns. Larger platforms can create shared trust-and-safety services, but smaller companies will struggle unless an ecosystem of managed services develops. Facebook is comparatively prepared for 2016-style interference, but Instagram, WhatsApp, and encrypted messaging create new risks that are harder to monitor. Twitter is relatively open and useful for researchers, but its pseudonymous identity model creates authenticity problems. YouTube is the weakest of the major platforms because its recommendation system can drive users toward radicalization and it has been inconsistent in policy enforcement. Media coverage often treats platform behavior as either pure censorship or pure negligence, ignoring the fact that every moderation decision has safety, privacy, and power consequences.

Data Points: Stanford election report recommendations: around 40 - Stamos cites a Stanford report with recommendations for Congress, tech companies, and individuals ahead of 2020. 2016 interference categories: 3-4 distinct types - He describes meme wars, hack-and-leak, overt propaganda, and direct election infrastructure attacks. Facebook content moderation staffing: more moderators added in the last year than all of Twitter’s employees and contractors - Used to illustrate Facebook’s scale and resource advantage in trust and safety. Facebook user base in the U.S.: less than 5% - He notes Facebook must think globally rather than only in U.S. terms. Russian ad legality estimate: around 80%+ - He says most Russian ads were not illegal under U.S. law because they were not electioneering. Company/field maturity comparison: late 1990s / early 2000s analogy - Trust and safety is compared to the early era of software security before standardized practices emerged. Twitter/YouTube policy reversals: 48 hours - He cites YouTube making quick, inconsistent moderation decisions over a two-day period.

Pivotal Quotes: "When you give people privacy, you also give privacy to bad guys." — Alex Stamos: Core framing of the privacy-versus-safety tradeoff in encrypted messaging and platform moderation. "We effectively need the same revolution in trust and safety." — Alex Stamos: He compares the current moment in abuse prevention to the late-1990s transformation of software security. "The companies are quasi-governments. They have powers that we generally reserve for democratically accountable elected positions." — Alex Stamos: He argues platforms must become more transparent and predictable because they wield public-power-like authority.

Implications: Platforms will keep moving toward privacy and encryption, but that shift will force new client-side safety tools, more transparency, and a real trust-and-safety industry. Startups, regulators, and media will need to understand that moderation, privacy, and power cannot all be maximized at once.

🔓 Sign Up for Unlimited Episode Search

About The Vergecast

The Vergecast is the flagship podcast from The Verge about small gadgets, Big Tech, and everything in between. Every Friday, hosts Nilay Patel and David Pierce hang out and make sense of the week’s most important technology news. And every Tuesday, David leads a selection of The Verge’s expert staffers in an exploration of how gadgets and software affect our lives – and which ones you should bring into yours.

View all episodes from The Vergecast