If a moderator of an online forum edits my post to say something illegal, how could I prove I didn&#39;t write the incriminating message?
<p>Hypothetical situation.</p>
<p>Several years ago, Reddit co-founder Steve Huffman caused some controversy by editing comments that criticized him. On most social media platforms, staff cannot edit users' messages without direct access to the database.</p>
<p>However, this is often not the case for certain forum software, such as phpBB and vBulletin. In some cases, the forum does not even indicate that a moderator has edited a message. So if a moderator changes my post to say something illegal, then how could I prove in court that my post was tampered with?</p>
<p>Let's say I go on a forum and say I wish to meet the president of the United States. Suppose a mod decides to pull a &quot;prank&quot; and edits the message to say I want to murder the president of the United States, and I end up getting a visit from the Secret Service. To complicate matters, the forum requires registration to view and is not accessible to the Wayback Machine or Google caches. In this case, how could I prove I didn't threaten the POTUS?</p>

<p>You do not have to. The burden of proof is on the prosecution to prove that you made the threat. Reasonable doubt exists in the circumstances that you describe, that there are no logs of who accessed what when and how. Your attorney may have to introduce expert witnesses who can explain how it is possible that text from your computer can end up on a web page, and they can testify that there are many ways that data can be entered into the database, only a few of which actually involve you.</p>

<p>You're describing an attempt to incriminate you for a crime you didn't commit. This isn't unique to the Internet.</p>
<p>While in most countries with rule of law the prosecution needs to prove your guilt to a very high degree of certainty (e.g. &quot;beyond a reasonable doubt&quot; in the US), this does not mean absolute certainty. The fact that you can come up with a speculative alternative explanation of what happened is not necessarily enough to introduce reasonable doubt.</p>
<p>So just like in most criminal cases, a decision will be made on the specific facts of your hypothetical case. If you're talking about a major social network, the prosecution's case will be stronger than if you're talking about some guy's hobby project. If the prosecution shows that you have a history of crimes similar to the one you are framed for, that will make their case stronger as well. However, if you can show that someone with write access to your comments has a motive for framing you, that would be deadly to their case, as that shows a likely and coherent alternative explanation for the facts.</p>
<p>In the extreme case, though, where you're talking about a major social network and one of the database employees just decides one day to single you out for no reason and make you look like a lunatic that wants to kill the president (and he properly hides his tracks so the social network later insists you were the author), you're probably out of luck unless you can provide at least some proof. That hypothetical scenario is so far-fetched that in case it ever were to happen, no judge or jury would probably consider this a plausible alternative explanation without evidence.</p>

<p>While the situation you describe is very difficult for your hero, the company would have to have a hell of a reason to target your hero.   <strong>Because, they only get to do that trick 2-3 times <em>ever</em></strong>.</p>
<p>&quot;The first time is happenstance. The second time is coincidence. The third time is enemy action.&quot; Military proverb.</p>
<p>The first person who claims this was done, straight faced, in open court, is an obvious liar.  The second who claims it is a coincidence of liars. But the third is starting to get traction.  Now the judge will be more tolerant of some exploration of this topic.  People get subpoenaed, the logging system gets discussed, &quot;how this could be done&quot; becomes a topic of discussion.  Third parties start snapshotting content from the site so alterations can be detected.  The fourth time it happens, the company is caught red-handed, socially canceled,  sued to oblivion, and some people go to jail for perjury and obstruction of justice in case #3.</p>
<p>So for this social media company to use one of its 1-2 &quot;free shots&quot; would require a <em>truly extraordinary</em> loathing from company management.</p>
<p>And here's the problem with that.  That loathing wouldn't arise from nothing.  It's gonna leave a documentation trail across social media or elsewhere in the world. It may be common knowledge among acquaintances that they had an acrimonious feud.  There may be a restraining order or police records.   So even defendant #1 would be able to show this to introduce doubt.</p>
<p>And similarly, as we certainly do know, a person doesn't get out of bed one day and decide to kill the president. Read &quot;The Gift of Fear&quot; by Gavin DeBecker.   If they're active on social media, there'll be <em>years</em> of increasingly radicalized blah-blah. A <em>conspicuous absence</em> of such a profile makes it very much more likely to be a Joe Job by a third party.</p>
<p>The jury will figure that out, and so will the authorities. So their &quot;one shot&quot; probably  wouldn't even work.</p>

<p>The primary evidence against you would be based on server logs or database entries of the website where the illegal information is posted. You could counter that evidence by recording logs of browser submissions on your side. There are extensions (e.g. <a href="https://github.com/drewsb/FormVault" rel="nofollow noreferrer">Form Vault</a>) which automate saving of web form submissions in your browser. It's also possible to set up a local proxy / vpn server which your browser would use, and collect the server's logs.</p>
<p>The degree of trust in logs from both side will likely depend on expert judgement. If the website in question is a major platform with proper security practices (automated log handling, strict access control on servers which store the logs and regular security audits), the log on your side (which you may have forged) may not be enough.</p>
<p>For a smaller website the degree of trust would be comparable, so having local logs would be an effective defence.</p>

hypothetical