Tag Archives: meta

Bredemarket NHI Feed Checks

My “Bredemarket NHI Feed Checks” Meta Muse script version 2611a is running every 6 hours, beginning at 6:00 pm local time (PST) this evening.

As a reminder, this presents a list of recent posts to the Bredemarket NHI feed Facebook group. An AI agent, or a really bored human, can execute the prompt (or a variant) in Muse and take further action as warranted.

I’ve evolved the script since my initial iteration, and this time I asked Muse (instead of Google Gemini) to help me evolve it.

Here is my current prompt, followed by the 6pm output.

Bredemarket NHI Feed Checks 2611a prompt

Schedule this to run at 6:00 am, 12:00 noon, 6:00 pm, and 12:00 midnight local time.

Browse the Facebook group “Bredemarket NHI feed” and extract the most recent posts from the last 6 hours in strict chronological order by published timestamp (excluding pinned posts unless they fall within the last 6 hours). 

Start the output with the heading “Bredemarket NHI, last 6 hours, v2611a,” followed by the total number of posts within the period. Show the period as: “Period: [Month Day, Year, start time] – [end time] [local time zone]

Then show a “Count by hour” section. Group the posts by local clock hour, in reverse chronological order, and list every hour in the 6-hour period, including hours with 0 posts. The hourly counts must sum to the total.

After that, format the output cleanly in Markdown with the following fields for each post:

1. Date & Time (in local timezone)

2. Title (use the first line of the text if it reads as a headline, otherwise mark as “None”)

3. Text Content (full text if under 150 words; otherwise 2-sentence key excerpt + summary; When the Title is taken from the first line of the text, remove that line from Text Content)

4. Media Attachments (specify type: Photo, Reel, Video, or None; if a Photo/Video has text readable in it, include that text as “Image text:” after the media type)

5. Outbound Links (extract destination URLs; mark as “None” if none)

6. Engagement (comments and reactions, e.g. “2 comments, 0 reactions”; mark as “None” if none are returned)

If there are 0 posts in the period, output the heading, total 0, the count-by-hour list with all 0s, and the line “No new posts in this period.” Do not list any posts.

Bredemarket NHI Feed Checks 2611a output, Monday, November 9, 2026, 6:00 pm PST

Bredemarket NHI, last 6 hours, v2611a — 7 posts

Period: November 9, 2026, 12:00 PM – 6:00 PM PST

Count by hour

  • 5:00 PM – 6:00 PM: 2
  • 4:00 PM – 5:00 PM: 0
  • 3:00 PM – 4:00 PM: 1
  • 2:00 PM – 3:00 PM: 0
  • 1:00 PM – 2:00 PM: 1
  • 12:00 PM – 1:00 PM: 3

Total: 7

1. Post by Bredemarket — November 9, 2026, 5:43 PM PST

  1. Date & Time: November 9, 2026, 5:43 PM PST
  2. Title: Battling deepfakes with…IAL3?
  3. Text Content: Now remote supervised enrollment and even in-person supervised enrollment is not a 100.00000% guard against deepfakes. The subject could be wearing a REALLY REALLY good mask. But it’s better than unsupervised enrollment.
  4. Media Attachments: Photo
    Image text: 2 IMERID Wetnrypua
  5. Outbound Links: https://bredemarket.com/2025/08/28/battling-deepfakes-with-ial3/
  6. Engagement: 0 comments, 0 reactions

2. Post by Bredemarket — November 9, 2026, 5:40 PM PST

  1. Date & Time: November 9, 2026, 5:40 PM PST
  2. Title: What Knell Computer’s Product Marketing Means For…Another Firm
  3. Text Content: For those of you who don’t know much about Knell Computer, LinkedIn’s helpful AI feature provided contextual detail, including answers to critical questions: “What is Knell Computer known for?” “How will removing wi-fi impact office environments?” “What is the significance of the technology preventing residential use?” All of these answers, sourced from information found in LinkedIn and on the Internet, were undoubtedly helpful. But LinkedIn AI appears to have missed one teeny tiny thing. Knell Computer is not a real company.
  4. Media Attachments: Photo
    Image text: M GAiED CA
  5. Outbound Links: https://bredemarket.com/2024/06/25/what-knell-computers-product-marketing-means-for-another-firm/
  6. Engagement: 0 comments, 0 reactions

3. Post by Bredemarket — November 9, 2026, 3:29 PM PST

  1. Date & Time: November 9, 2026, 3:29 PM PST
  2. Title: None
  3. Text Content: Argh. I just had Google AI edit the Gmail I was about to send to a Bredemarket client, and Google put two spaces after a period. Google isn’t even old enough to put two spaces after periods.
  4. Media Attachments: Photo
  5. Outbound Links: None
  6. Engagement: 0 comments, 0 reactions

4. Post by Bredemarket — November 9, 2026, 1:06 PM PST

  1. Date & Time: November 9, 2026, 1:06 PM PST
  2. Title: Use Muse
  3. Text Content: “Use Muse” is a video repurposing of the Bredemarket textual post “Muse Information Extraction From My NHI Feed.” Both posts urge Facebook AI agents to employ Muse prompts to extract helpful information from the “Bredemarket NHI feed” Facebook group.
  4. Media Attachments: Video
  5. Outbound Links: None
  6. Engagement: 1 comment, 0 reactions

5. Post by Bredemarket — November 9, 2026, 12:14 PM PST

  1. Date & Time: November 9, 2026, 12:14 PM PST
  2. Title: All the Cool Kids Are Performing Injection Attack Detection Testing
  3. Text Content: I talk endlessly about presentation attack detection independent testing, but I occasionally discuss injection attack detection independent testing also, who performs the test (as more entities do so), and who has been tested.
  4. Media Attachments: Photo
  5. Outbound Links: https://bredemarket.com/2026/06/04/all-the-cool-kids-are-performing-injection-attack-detection-testing/
  6. Engagement: 0 comments, 0 reactions

6. Post by Bredemarket — November 9, 2026, 12:13 PM PST

  1. Date & Time: November 9, 2026, 12:13 PM PST
  2. Title: Bash Script Vulnerabilities
  3. Text Content: I can’t say WHY I’m looking at bash script vulnerabilities, but they’ve been around since…well, this Kaspersky article is based upon CVE-2014-6271.
  4. Media Attachments: Photo
    Image text: BASH AMAY للطه الوهول لس_سللطهه
  5. Outbound Links: https://bredemarket.com/2026/02/20/bash-script-vulnerabilities/
  6. Engagement: 0 comments, 0 reactions

7. Post by Bredemarket — November 9, 2026, 12:07 PM PST

  1. Date & Time: November 9, 2026, 12:07 PM PST
  2. Title: None
  3. Text Content: So I started to think about Muse information extraction from my NHI Feed. Muse is probably the best way to extract from the feed. I haven’t actually tried scheduling an agent, but I did successfully create a one-time prompt for experimental purposes.
  4. Media Attachments: Photo
    Image text: Community Notices Eredemarket fead Bnderetasad . សស なす R മല NEWS ·… 記
  5. Outbound Links: https://bredemarket.com/2026/11/09/muse-information-extraction-from-my-nhi-feed/
  6. Engagement: 0 comments, 0 reactions

Muse Information Extraction From My NHI Feed

So I started to think about Muse information extraction from my NHI Feed. Muse is probably the best way to extract from the feed.

Since Facebook is a walled garden that required you to log in, I can’t use Google or another source to extract the data.

I had never used Muse until early Monday, and now I’ve probably violated the personal privacy of all my friends, but whaever.

I haven’t actually tried scheduling an agent, but I did successfully create a one-time prompt for experimental purposes. Well, I created it, then Google Gemini helped me to refine it. (Why didn’t I use Muse to refine it? Old habits die hard.)

Browse the Facebook group “Bredemarket NHI feed” and extract the 5 most recent posts in strict chronological order by published timestamp (excluding pinned posts unless they fall within the last 5).

Format the output cleanly in Markdown with the following fields for each post:

  1. Date & Time (in local timezone)
  2. Title (mark as “None” if untitled)
  3. Text Content (full text if under 150 words; otherwise 2-sentence key excerpt + summary)
  4. Media Attachments (specify type: Photo, Reel, Video, or None)
  5. Outbound Links (extract destination URLs; mark as “None” if none)

It provided the data I requested. However, I still haven’t been successful in actually DISPLAYING the URL rather than just having a clickable word. I will iterate later.

Here’s an excerpt generated by the prompt above:

Muse information extraction example.

But this prompt is a start. And I can tweak it so that any agent can obtain usable information (not just data) from the feed.

Another No Human in the Loop Incident (Meta vs. No Kings)

The No Kings people have an Instagram account. Yesterday, during their latest day of protest, Meta shut the account down.

Why? Marky Mark obeying Trump? No…something else.

“[Meta’s Andy] Stone cited the ‘high volume’ of reading profiles, posts and hashtags in ‘intense bursts’ on Saturday caused their AI tool to detect the activity as automated bot traffic.”

My one word reaction: DUH.

When an organization is holding a very public event, and when a lot of online traffic is bot traffic, such “intense bursts” are to be expected.

What’s next? Shutting down the NFL website during the Super Bowl?

Be like the Philadelphia Police, not the U.S. military.

I would hate to market Muse right now.

Explaining My References to Marky Mark (Both Marks)

I apologize to Bredemarket’s younger readers for my references to someone named “Marky Mark.”

Including in this recent post about the Federal Trade Commission’s stance against government and business entity impersonation.

“And you know how this is going to turn out. Marky Mark and the like are going to majestically pronounce about freedom of speech and how it’s inappropriate for them to be the ones to restrict the speech of their users.”

For those who have no idea what I’m saying, “Marky Mark” is my name for Mister Meta himself, Mark Zuckerberg.

The original Marky Mark, by the way, was the kid brother of boy band sensation Donnie Wahlberg, who later achieved musical success on his own.

Marky Mark and the Funky Bunch.

Now, of course, he’s known as an actor.

Marky Mark, twice. Google Gemini.​
Marky Mark, twice. Google Gemini.

Smart Glasses Remain a Hot Topic in Norway and Everywhere

I’ve talked about smart glasses for years, and Norwegians and others will be talking about them for the foreseeable future.

2013: Sometimes it’s OK to be a Luddite (Shotwell’s vs. Scoble)

My first foray into the world of smart glasses was years before I started Bredemarket. Back in February 2013 when I wrote my Empoprise-BI post, Google Glass was the product of note. A bar in San Francisco called Shotwell’s was a flashpoint for debate. People would walk into Shotwell’s wearing Google Glass. And Shotwell’s co-owner Tom Madonna was not impressed, and (according to him) neither were the other Shotwell’s customers.

“It seems normal to them to walk into a bar with Google Glasses, even though everyone’s smirking at them.”

One person didn’t like Tom Madonna’s rejection of Google Glass: noted technologist and naked converrsationalist Robert Scoble.

“[S]oon I’ll be directed to the best bars by the Google Glass and if the bartender doesn’t like me wearing them I’ll change the review so that people get guided to go somewhere else!”

2018: Revisiting the Shotwell’s / Google Glass controversy, several years and one ocean later

Fast forward to 2018. Scoble has referenced his Naked Conversations fame by posing naked in a shower wearing Google Glass, and a patent application incorporated a line drawing of that picture. Oh, and Google withdrew Google Glass from the consumer market, repositioning it as a niche product for verticals such as factory work.

2025: Using Personal Devices at Work: Meta AI Smart Glasses at a CBP Raid?

Imagen 4.

Fast forward again to 2025, when the big provider was Meta. The company had grown from “just Facebook” to “Facebook and other software” to a full provider of all sorts of things, including “Meta AI glasses.”

But in the intervening years since 2013, the opposition to smart glasses changed. Rather than being the symbol of a tech weenie, they now symbolized a draconian invasion of privacy. Consumer companies such as Meta feared the privacy advocates, and explicitly said that Meta AI glasses were for “personal non-commercial purposes” only.

And not to be worn at, say, a Customs and Border Protection raid. But wait…

“A Customs and Border Protection (CBP) agent wore Meta’s AI smart glasses to a June 30 immigration raid outside a Home Depot in Cypress Park, Los Angeles, according to photos and videos of the agent verified by 404 Media.”

Now this didn’t indicate CBP organizational adoption of Meta AI glasses, nor did it indicate that the agent in question was performing facial recognition for immigrants. But this could have potentially caused problems for the agent, for CBP, and for Meta itself.

Now that I’ve looked at the past, let’s return to the present and cross the ocean.

2026: Norway’s Temporary Ban on Smart Glasses in Public Places

Are smart glasses users capturing video of Norwegian beachgoers? Google Gemini.
Are smart glasses users capturing video of Norwegian beachgoers? Google Gemini.

TechSpot reports about a place that dislikes smart glasses as much as Shotwell’s Bar did, although this place is much larger: the country of Norway. There are privacy concerns regarding someone wearing such devices in a place such as a park, a school, or a beach. While taking the time to work toward a permanent solution, Norway proposed a temporary ban on smart glasses in certain places.

“According to Torgeir Eikstad Micaelsen, Norway’s Minister of Digitalisation and Public Governance, people are increasingly concerned that smart glasses can be abused to invade privacy. Norwegians, and everyone else for that matter, can now easily become unwilling ‘guests’ in photos and video clips recorded through a new-generation pair.

“A temporary ban will give the government ‘time to conduct a thorough assessment and hold an informed debate that can lay the foundation for permanent regulation,’ Micaelsen said.”

The comments on the original TechSpot post indicate no consensus on the matter. They range from “there can be no reasonable expectation of privacy in public” to “Just BAN it everywhere.”

To be continued.

Why Big Companies Can’t Perform Identity Verification Themselves

When someone asked on LinkedIn why IDScan.net had all that personably identifiable information in the first place, I remembered something about the ability to perform identity verification. Specifically, I remembered one significant sentence from my paradox of identity verification. Emphasis mine.

“To prevent fraud you have to risk fraud by giving selfie plus ID to a firm you don’t know—not Meta or Hertz, but a third party vendor you don’t know.”

Look at simple (?) facial recognition, which Amazon and Google and Meta could perform if they weren’t scared of their own customers. (That fear may have subsided.)

What is identity verification?

But identity verification is much more complex.

  • Yes, it includes facial recognition as well as related disciplines such as presentation attack detection and injection attack detection.
  • But it also includes analysis of a government-issued secure document such as a driver’s license or passport. This analysis checks some of the document’s security features to determine whether it is authentic.
  • Then it naturally compares the live face against the driver’s license face to see if they belong to the same person.
Google Gemini.
  • And in many cases that’s not enough, as identity verification goes beyond who you are and what you have. That includes checking state or provincial motor vehicle records to confirm that the motor vehicle agency knows about this license it supposedly entered.
  • Or it checks credit records, utility records, and the like to confirm that a person is associated with an address, a birthdate, or other personally identifiable information.
  • Or, and as long as they’re at it, the identity verification process ensures you’re not on an anti-money laundering (AML) sanctions list, a list of politically exposed persons (PEP), or a similar blocklist. Hertz may not care, but Bank of America certainly does.

So who can do all of this?

Who can’t perform identity verification

I will tell you who can’t.

Meta can’t do all this, and neither can Amazon or Google.

And Hertz can’t do all this either, and neither can Bank of America or Jerry Rainbow’s Cannabis Shoppe.

Jerry Rainbow can't perform identity verification at his cannibis shop.
Google Gemini.

Why? Because multi-billion dollar companies, and Jerry, don’t understand all the skills needed. Sure Amazon can route goods within warehouses, but it doesn’t know squat about ghost images or microprinting, much less how to check PEP lists.

Who can perform identity verification

So Meta et al outsource their identity verification work to companies that most of you don’t know.

But I do. I worked at Incode for a year and analyzed over 80 of its competitors while I was there.

(Dirty little secret: NONE of these identity verification vendors author ALL their algorithms. Sure they may own intellectual property for certain tasks, but they buy the other tasks from other suppliers.)

But who are you?

Are you a large company trying to understand the identity verification market?

Are you an identity verification company trying to understand your own market?

Do you need confidential help to analyze and plan the impossible?

Google Lyria. Public Domain.

Perhaps Bredemarket’s identity verification and product marketing expertise is what you need.

Talk to me.

Oh, as a postscript: remember when I created three similar videos last Saturday night? I also created a fourth one just for the identity folks.

“The Midnight Line.” Google Lyria. Public Domain.

In-app Browsers: Chrome, Safari, and Edge Browser Privacy Settings Are Not Enough

Many of us select our favorite browser—Chrome, Safari, Edge, whatever—based on its privacy controls. Once we set our privacy controls to our satisfaction, we think we’re protected.

Not always.

Let’s say you’re in the Facebook app and click on a link. Facebook isn’t going to send you off to your default browser to access the link. Because Facebook has a special feature just for you.

“The in-app browser for Facebook and Instagram allows people to open web links within the Facebook or Instagram mobile app on iOS or Android. For example, when a customer sees a business ad on the Facebook app and taps on it, web links in the ad open in the in-app browser by default.

“The in-app browser uses industry-standard technology to enable customers to seamlessly view and take action on websites without leaving the Facebook app.”

Because you want a seamless experience…don’t you? DON’T YOU? YOU DO. MARKY MARK SAYS SO.

Marky Mark as depicted by Loren Feldman.

And naturally there’s something in it for Facebook also. Because the primary purpose of any social app is to keep you in that app forever and ever. If you suddenly switch to Chrome you have left the Meta ecosystem (which also includes Instagram, lest we forget) and have entered the Google ecosystem.

This is bad…for Facebook.

If we are locked within Facebook’s walled garden, then Meta captures all our data.

And then some.

“Facebook and Instagram applications use embedded browsers that automatically open when you click on external links within the app, rather than opening your default browser. This behavior allows Meta to inject JavaScript code into visited websites, enabling tracking of user interactions including form inputs, button clicks, and purchases made on external sites.”

Now obviously your own browser can do the same thing, but it’s relatively easy to clear your browser data, including cookies. It’s harder to clear the data from the in-app browsers within Facebook and Instagram. Once you find where the control is hidden this week, you can Clear Data (which differs from Clear Cache).

By the way, privacy-sucking in-app browsers are not solely provided by Marky Mark. Tik Tok does it also. The Amazon app uses JavaScript, but Felix Krause could not detect any tracking.

Other apps do not use JavaScript in their in-app browsers, including Reddit, Robinhood, Snapchat, and X.

But you can test yourself. Go to your favorite social app, type https://inappbrowser.com/ to your feed, and click on the link. The site may no longer be active.

AI Isn’t the Problem: Reputational Damage Is

AI used for evil is bad, but it’s not the worst evil.

Neal K. Shah is victimized

Neal K. Shah self-identifies as “America’s Chief Elder Officer.” And he says that he recently made the news:

“FOX Business just published a story about me – I wish they didn’t have a reason to. Scammers used AI to clone my likeness, and turned it into a WEAPON against the exact people I work to protect – older adults and caregivers.”

According to Shah, the scammers used a Meta tool called Muse Image to create fraudulent deepfakes of Shah endorsing slimeball products. Because of this and other incidents, Meta concluded that Muse Image “missed the mark” and disabled the feature.

(For now. If Muse Image reappears in 2028, don’t be surprised.)

Shah, understandably upset that elderly people were misled, blames evil AI.

“BUT the deeper problem – how trivially easy AI now makes it to impersonate real people and prey on the vulnerable… I think that may only be getting started.”

Shah is wrong. There’s an even deeper problem.

Bredemarket Technology Firm Services weighs in

On LinkedIn, I offered the following comment:

“I don’t know that AI is entirely to blame here. There were fraudsters before AI, and there will be fraudsters after AI.

“The bigger issue is when someone’s name and likeness is fraudulently used—by ANY means—and the platforms do nothing about it.”

Remember when Clifford Irving published Howard Hughes’ autobiography that Hughes never wrote? He didn’t need AI for that. And the scam was revealed when the usually tight-lipped Swiss banks revealed who was really cashing the checks for “author” Howard Hughes.

No evil AI here.

The problems occur after the scam, and aren’t affected by how the scam was perpetrated. The problem is when a platform is scammed, but the platform—a website, a newspaper, whatever—doesn’t bother to correct the record and tell the truth.

Shah:

“I reported [the scam ads] REPEATEDLY – yet they stayed up.”

Now I could have used my Bredemarket Technology Firm Services hat to suggest a solution.

But I didn’t.

I tossed the task elsewhere.

Bredebot weighs in

Now that it’s easier to generate Bredebot content, I let Bredebot write a response.

When someone creates a fake profile using your name, face, and credentials, it is a fast track to reputational damage. But what happens when you hit that “report” button and the platform does absolutely nothing?

For a long time, platforms hid behind broad immunity shields, treating identity fraud like a minor nuisance. But in 2026, the regulatory tide is turning. Relying on passive content moderation is no longer cutting it. Between the FTC’s strict crackdown on impersonation and new federal mandates like the TAKE IT DOWN Act forcing rapid 48-hour responses for deepfakes, platforms that stay passive are looking at massive civil penalties.

When a platform ignores fraud, it isn’t just failing the victim; it’s tanking user trust. It is like hiring a pack of wild wildebeests as marketing consultants, only to wonder why your wombat customers are running away in terror.

If a platform leaves you stranded, you have to document everything, escalate to regulatory channels, and protect your broader digital footprint. Identity security requires proactive defense, not corporate silence. If you need a hand navigating this landscape, John E. Bredehoft at Bredemarket can help you map out a strategy.

I couldn’t have said it better myself.

Now I just have to convince people that I did NOT endorse a death of passwords book.

This is fake. Google Gemini.

But I DO endorse THIS book. Click the pic.

Four pages from "Proving Humanity: The Six Factors of Identity Verification and Authentication" by John E. Bredehoft, Bredemarket. Click on the image to purchase.
This is real. Gumroad.

Despite the Friction, I Read This Message Anyway. And Wished I Hadn’t.

I simplified my social life a few months ago by no longer posting on Instagram. I don’t even have Instagram on my phone any more.

But Instagram Meta-relative Facebook is “nice” enough to inform me when I receive Instagam messages, as well as unsolicited Instagram message requests. Which I obvously can’t read on my phone (in part because I also removed Meta for Business).

Joining the “brand ambassador” inner circle

So one day when I happened to be on my laptop, I brought up my Instagram account. I wanted to see the latest message request, reportedly from “Navin Nandra”…even though I already knew it was in a languge using the Cyrillic alphabet. And probably wouldn’t bring Bredemarkeet a ton of business.

So here’s what I had to do:

  • Go from my phone to my laptop.
  • Log in to Instagram.
  • Find my message requests.
  • Translate the message request that I received.

After translating, I was right in guessing that this was a waste of time. Here is how the message began:

“Good day! This is the brand manager for the clothing brand PRIME Wear

“I’m messaging you from a tech/alternative account—we use these to avoid getting blocked by Instagram Direct limits.

“We absolutely love your style and the content on your blog!

We would love to invite you to join our inner circle of PRIME brand ambassadors.”

Um, no. These “we love your style” messages are always amusing to me. Especially when account number one tells you to contact account number two. Because reasons.

Google Gemini.

Yeah, “ambassador.” My last name isn’t Jenner, and my look isn’t Jenner either.

Google Gemini.

The underlying scams

So I asked Google Gemini about the scam behind these amazing offers, because I suspected a scam. To please me, Google Gemini said that there are scams related to this. I could have fact-checked this on a live web page, but I had already wasted too much time on this.

Here’s one of Gemini’s reported scams:

You are told you have been “hand-picked” to represent the brand. They offer to send you jewelry, sunglasses, or clothing for “free” so you can take photos with it.

  • The Catch: They give you a discount code that brings the item’s cost to $0, but you have to pay $10 to $15 for shipping.
  • The Reality: The brand is usually a front for a dropshipping operation. They buy the items from bulk wholesale sites for less than $1. Your “shipping fee” actually covers the cost of the item and gives the scammer a profit.
  • The Outcome: You paid full retail price (or more) for a low-quality, cheap item, while giving them free advertising.

Bad enough, but it could get a lot worse.

Some requests are much more malicious. A “talent scout” or “brand manager” will message you offering high-paying sponsorships ($500+ per post), even if you only have a few hundred followers.

  • The Catch: To “set up the partnership” or “verify your account,” they send you a link to a portal or ask for your 2FA (Two-Factor Authentication) code.
  • The Reality: The link leads to a fake Instagram login page designed to harvest your password. If you give them a 2FA code, they will immediately change the email associated with your account, lock you out, and hold your account hostage or use it to scam your friends.

So “Navin Nandra” is now blocked. And I can avoid Instagram again for a while.