GIỚI THIỆU VỀ TẬP NÀY
A journalist named Kelsey Piper handed Claude Opus 4.7 a 125-word draft of a political column she had never published. Incognito mode. No login. Through the API. She asked: who wrote this? Claude identified her. ChatGPT guessed Matthew Yglesias. Gemini guessed Scott Alexander. Both wrong. Then four more tests across genres and decades — a Pokémon school report, a 1942 movie review, a 500-word heist novel, a college essay from 15 years ago. Claude went 5 for 5. Same writer recoverable from prose nobody had ever published.
This episode is what the threshold drop is. In 1964, the canonical stylometric study — Mosteller and Wallace on the Federalist Papers — needed about 1,500 words per essay and a closed list of two candidates. In 2013, identifying J.K. Rowling as Robert Galbraith required an entire 80,000-word novel and a list of four candidates. In 2026, a frontier language model needs 125 words and the open set of every public writer on the internet. The text required dropped about a hundred-fold. The candidate pool expanded by a factor of millions.
Mechanism: classical stylometry — Burrows' Delta counting commas and function words — became latent-vector matching inside a transformer. Huang et al. EMNLP 2024 anchor: 84% accuracy at 60 words on a 10-author benchmark.
Anthropic's April 2025 chain-of-thought faithfulness paper: Claude 3.7 Sonnet's reasoning chains acknowledge planted hints only ~25% of the time. The other 75%, the chain reasons through alternative arguments. Larger models produce less faithful reasoning, not more. Apply that here: Claude identifies the writer correctly, then generates a plausible reason. Sub-symbolic identification. Symbolic confabulation.
Institutional fallout: Anthropic's December 2025 release of 1,250 anonymized interview transcripts — deanonymized 25% in ~1 day. Snowden's 2013 stylometric hedge. Reality Winner. Glassdoor reviewers under threats that don't require a subpoena. Talley v. California and McIntyre v. Ohio protect against government compulsion but not private inference.
And the 15-year fingerprint persistence. Five predictions with horizons. Closing thesis: anonymity, which used to be the default state of writing, is now a capability deficit.
RELATED EPISODES
When AI Agents Go to Court — the privacy/legal parallel for inference-based identification
Claude Mythos — the capability stack that makes 125-word identification possible
ShinyHunters SSO — the adjacent data-exposure surface attackers can pair with stylometric inference
Mythos Bifurcation — frontier consolidation that concentrates this capability
CHAPTERS
00:00 Cold open — Kelsey Piper × Claude Opus 4.7
01:56 Intro + preview
03:19 History — 1964 Federalist / 1996 Unabomber / 2013 Rowling
05:40 Mechanism — function words to latent vectors
08:30 Why Claude specifically
09:54 Right ID, wrong reasoning — Anthropic faithfulness paper
13:24 Implications — Anthropic dataset, Snowden, Glassdoor, First Amendment
18:32 15-year fingerprint persistence
20:12 Five predictions
22:37 Closing thesis — capability deficit
SOURCES
Apr 2026 — Kelsey Piper, The Argument: 'I can never talk to an AI anonymously again'
Apr 2025 — Anthropic: Reasoning Models Don't Always Say What They Think (CoT faithfulness)
Mar 2025 — Anthropic: On the Biology of a Large Language Model (Lindsey et al.)
2024 — Huang, Chen, Shu (EMNLP): Can Large Language Models Identify Authorship?
Feb 2026 — Tianshi Li (Northeastern Khoury): deanonymizing the Anthropic Interviewer dataset
Dec 2025 — Anthropic: anonymized interview transcript release (~1,250 transcripts)
2013 — Patrick Juola (Duquesne): Galbraith / Rowling identification
1996 — FBI / James Fitzgerald: Unabomber stylometric attribution
1964 — Mosteller and Wallace: The Federalist Papers Bayesian authorship study
1995 — McIntyre v. Ohio Elections Commission (anonymous speech)
1960 — Talley v. California (handbill identification ordinance struck)
