BSidesCharm2025

How to Build Authentic Sock Puppets with Your Neighbors’ Yard Sale Junk
2025-04-12 , Track 1

This industry cyber deception practitioner’s short talk demonstrates how to build authentic online sock puppets using the cheap nostalgic junk we buy at yard sales to project the storyline and cultural depth of your sock puppet for defensive cyber deception.


This industry cyber deception practitioner’s short talk demonstrates how to build authentic sock puppets using the cheap nostalgic junk we buy at yard sales. This presentation will introduce the behavioral foundations of how we evaluate content online, based on how likely it is we think someone manipulated that content. When we understand how people find content and people to be genuine, then we have a model for creating or repurposing the items we might find in a local yard sale. These items might have real storylines and ethnic and cultural value, but practitioners can fictionalize almost any storyline with these items to project the depth of your sock puppet. People tend to scrutinize content and people online less when they engage content and storylines that induce nostalgic affect and feature tangible items. This presentation will demonstrate the application of this model based on two local yard sales, and design of those items into notional sock puppet storylines and scenarios. This model can be used by beginning to advance sock puppet practitioners.

Tim Pappa is an Incident Response Engineer – Cyber Deception Strategy, Content Development, and Marketing, with Walmart Global Tech’s cyber deception team. Before Walmart, Tim was a Supervisory Special Agent and certified profiler with the FBI’s Behavioral Analysis Unit (BAU), specializing in online influence and cyber deception. Tim is also a Senior Behavioral Consultant with Analyst1 and a Strategy and Statecraft Fellow with the Center for Strategic and International Studies.