New book about online activity in the 2016 US presidential election argues that targeted cyberattacks by hackers and trolls were decisive in changing outcome
Jane Mayer / New Yorker :
Context & Ripple Effects
Jane Mayer's book stakes out the maximalist position in the 2016 interference debate: that hackers and trolls didn't just harass the election but decided it. The related coverage shows why that claim stayed contested — a New York University study later found Russian troll accounts reached voters minimally, with just 1% of users accounting for 70% of exposure.
The book also lands mid-arc in the policy response: officials had already judged US election security responses to Russian interference inadequate heading into 2020, and by November 2020 US Cyber Command's pre-emptive posture was credited with preventing a crippling infrastructure attack — evidence the 'decisive attack' scenario shaped defense planning even as its 2016 influence version stayed disputed.
First-order effects
- Mayer's decisiveness thesis forces a direct confrontation with the empirical record: the NYU findings on troll reach give platforms and researchers a counterweight to the narrative that persuasion campaigns swung voters.
Second-order effects
- If influence operations are treated as potentially outcome-decisive, defenders shift resources toward pre-emption — Cyber Command's 2020 posture and officials' watch on 'perception hacks' that undermine confidence when exaggerated both follow from taking the worst case seriously.
Third-order effects
- Election defense splits into two tracks that persist regardless of which side of the 2016 debate wins: hardening voting infrastructure against attack, and monitoring social platforms for disinformation — with outsiders, not the platforms themselves, doing much of the prodding, as midterm coverage of Facebook showed.
The trend: The election-security field is moving from arguing over whether online interference decides outcomes to building defenses — Cyber Command pre-emption, platform monitoring, confidence protection — that assume it might.