X's security advice echo chamber: 13M-user study reveals

A new arXiv study, "Echoes in the Digital Abyss," from researchers Reagan Dennison, Saanvi Sharma, Noshir Contractor, and Sruti Bhagavatula, takes a hard look at whether security and privacy advice actually spreads on social media. The team built a massive graph of over 13 million users on X (formerly Twitter), identifying 10,159 accounts that actively post or engage with security and privacy content. By analyzing follower networks and interaction patterns, they discovered that these conversations are overwhelmingly confined to a small set of highly interconnected tech, security, and privacy interest communities. The result: people outside this "inner circle" rarely see or engage with security guidance, even when it's informative.

This contradicts earlier experimental findings that suggested social networks could effectively disseminate best practices. In controlled settings, security advice seems to travel well; in the wild, it bounces around the same echo chamber. The authors emphasize that because users are more likely to trust content when their like-minded connections engage with it, the algorithmic and social reinforcement of these bubbles further isolates outsiders. They conclude by suggesting new strategies—such as targeting bridge communities, partnering with non-tech influencers, or designing content for different interest niches—to push security and privacy education beyond the converted. The paper is available on arXiv (2608.03940) and serves as a timely warning for cybersecurity professionals who assume social media outreach is working.