AI and Doxx Prevention Audits: What Strangers Can Find About You

End-of-lesson check

15 questions · take it digitally for instant feedback at tendril.neural-forge.io/learn/quiz/end-creators-ethics-safety-AI-and-doxx-prevention-audits-r13a7-adults

1. A creator wants to conduct a doxx prevention audit. Which personal information vector is most commonly exploited by bad actors targeting creators, beyond obvious social media profiles?

   1. Their email newsletter subscriber list
   2. Domain registration WHOIS records, data broker aggregation, and EXIF metadata in images
   3. Their streaming platform channel description
   4. Their public playlists on music platforms

2. Why does a one-time data broker opt-out pass provide only temporary protection?

   1. Opt-outs expire automatically after 14 days on all major brokers
   2. Data brokers continuously re-aggregate information from public records, repopulating opted-out entries within 3-6 months
   3. Opt-outs only apply in the state where the creator is registered
   4. One-time opt-outs are blocked by brokers who pay higher data aggregation fees

3. A creator uses their home address as their LLC's registered agent address. What doxx risk does this create?

   1. No risk — LLC filings are private in all states
   2. Business entity filings are public records in most states, making the home address searchable through state business registries
   3. The IRS will publish the address in quarterly filings
   4. Platform partners require physical address verification that becomes public

4. What is a 'threat model' in the context of a creator doxx prevention audit?

   1. An AI-generated list of all data brokers holding the creator's information
   2. A structured assessment of who is most likely to attempt a doxx, what they would do with the information, and which data types matter most given that threat
   3. A legal document that grants creators immunity from doxxing
   4. A platform safety tool that monitors mentions of the creator's real name

5. What is the primary function of EXIF metadata in original photos, and why does it represent a doxx risk?

   1. EXIF data stores the image's copyright information and is only readable by image editing software
   2. EXIF data embedded in photos often includes GPS coordinates of where the photo was taken, which can reveal home or studio locations
   3. EXIF data contains the creator's email address if they are signed into a cloud storage service
   4. EXIF data is only present in professional camera images, not smartphone photos

6. Which triage order is most appropriate when prioritizing data broker opt-outs based on doxx risk severity?

   1. Start with oldest entries, as these are most likely to be inaccurate
   2. Physical address first, then employer/business address, then family member information, then older aliases
   3. Start alphabetically by broker name for consistent coverage
   4. Prioritize brokers with the highest website traffic regardless of data type

7. What limitation does AI have in a creator-facing doxx prevention workflow?

   1. AI cannot identify which data brokers have indexed a creator's information
   2. AI can identify risk vectors and suggest opt-out steps, but cannot submit opt-out forms or force private actors to delete data
   3. AI cannot analyze EXIF metadata from photos
   4. AI cannot suggest the order in which opt-outs should be prioritized

8. A creator registers a domain for their brand and selects basic domain registration without privacy protection. What specific risk does this create?

   1. Their domain may rank lower in search results without privacy protection
   2. Their registrant name, email, and physical address are publicly visible in WHOIS databases
   3. Platform partnership applications require public WHOIS information
   4. SEO tools cannot index the domain without public WHOIS records

9. A creator who has already opted out of major data brokers asks AI to re-run the same audit 4 months later and finds their address has re-appeared in several brokers. What does this demonstrate?

   1. The first opt-out was completed incorrectly
   2. Data broker re-aggregation is continuous, confirming that quarterly audit cycles are necessary rather than a single-pass approach
   3. The creator's address has changed and brokers have the new information
   4. AI-assisted audits are less effective than manual audits for repeat searches

10. Which type of post content most commonly leaks a creator's physical location unintentionally?

    1. Text posts describing general opinions about news events
    2. Photos with EXIF GPS data and videos showing recognizable local landmarks, business signage, or street-level backgrounds
    3. Audio-only podcast content
    4. AI-generated images created from text prompts

11. A creator is targeted by an organized harassment campaign that has published their home address online. What is the most accurate statement about AI's role in recovering from this situation?

    1. AI can submit takedown requests to every platform simultaneously to remove the doxx
    2. AI can assist with documentation and communications, but cannot reverse a doxx that has already been published — the prevention phase has passed
    3. AI can identify and anonymize the individuals who published the information
    4. AI can auto-generate new identity documents to replace compromised ones

12. What type of AI audit pass best simulates the perspective needed for doxx prevention?

    1. An audit from the creator's own perspective reviewing their owned properties
    2. An OSINT pass that simulates what a motivated bad actor could find using publicly available tools and sources
    3. A legal compliance audit checking adherence to platform terms of service
    4. A brand safety audit reviewing content appropriateness

13. Why is 'swatting' the most severe physical threat associated with creator doxxing, and what information does it require?

    1. Swatting requires only a social media username to execute
    2. Swatting — making false emergency calls that trigger an armed law enforcement response — requires the creator's physical address, making address protection the single highest-priority doxx prevention goal
    3. Swatting is a platform-level issue that platforms prevent through creator verification
    4. Swatting only affects creators with over 1 million followers

14. A creator's business LLC uses their home address. Which action most effectively closes this doxx vector with minimal operational impact?

    1. Dissolving the LLC to eliminate the public filing
    2. Using a commercial registered agent service to replace the home address with a business address in all state filings
    3. Requesting that the state seal all LLC filings under a privacy protection order
    4. Switching to a sole proprietorship which has no public filing requirements

15. Which frequency is appropriate for recurring creator doxx prevention audits?

    1. Once at launch and never repeated unless an incident occurs
    2. Quarterly, because data brokers re-aggregate within 3-6 months and new information accumulates continuously
    3. Daily, using automated monitoring tools
    4. Annually, aligned with tax filing schedule