MORGAN MARQUIS-BOIRE▊
One of the most celebrated surveillance researchers of his generation — the man who helped unmask the FinFisher and Hacking Team spyware suites and traced how governments turned them on dissidents and journalists. Then, in October and November 2017, The Verge reported that multiple women had accused him of sexual assault, said it had corroborated roughly ten of those accounts, and reported chat logs it said contained his own admission. Citizen Lab, the EFF, and First Look Media cut ties; DEF CON put him on its ban list. He did not publicly contest any of it. He simply disappeared. The archive keeps the reporting, and the silence that answered it.
Cash Rules Everything Around Me: The Commercialization of Online Spying.
Not about the allegations — a specimen of his professional work: the title of his own research talk (co-presented with Bill Marczak), his framing of how surveillance became a product sold to governments — Stanford CDDRL, Nov 29, 2012
- WHO
- Morgan Marquis-Boire — security researcher, b. 1979, New Zealand FACT
- RECORD
- Google security team; senior researcher, Citizen Lab (University of Toronto); Director of Security, First Look Media; contributing writer, The Intercept; Special Advisor to the EFF; co-discoverer of the FinFisher and Hacking Team spyware campaigns FACT
- THE DRAMA
- In Oct–Nov 2017 The Verge reported that multiple women alleged sexual assault, said it had corroborated approximately ten accounts, and reported chat logs it said contained his admission ATTRIBUTED
- FALLOUT
- Citizen Lab, the EFF, and First Look Media / The Intercept cut ties; listed in DEF CON's 2017 ban notice. No criminal charge or conviction has been reported. He mounted no public defense FACT
- STATUS
- VANISHED — REPORTING UNCONTESTED — withdrew from public life in late 2017 and has not returned to it
This file handles a harder case than the rest of the wave, and it handles it carefully. The reporting here is not thin and not contested — it is extensive, corroborated by the outlet that ran it, and, by that outlet's account, partly admitted. It is still the reporting's, attributed on every line, because that is the honest description of what a reader can verify: not a verdict, but a body of journalism its subject never answered. The through-line is one the coverage itself named — a man who built a career exposing how the powerful surveil and abuse the vulnerable, accused of abuse by people with far less power than he had. We keep to what was reported. We name no one who came forward, and we reproduce nothing of what was done to them.
the drama timeline
ACT I — THE MAN WHO WATCHED THE WATCHERS (2011–2016)
Before any of it, there is the work — and the work is real, decorated, and pointed straight at state surveillance of dissidents.
-
2012–2014
FinFisher and Hacking Team
At Citizen Lab, Marquis-Boire and collaborators publish the first public identification of the FinFisher commercial spyware suite and trace its command-and-control servers across dozens of countries, then document the Hacking Team toolset. The research shows governments buying off-the-shelf malware to target activists, dissidents, and journalists. It is field-defining work.
-
2014–2016
From Google to the newsroom
After years on Google's security team, he becomes Director of Security at First Look Media and a contributing writer at The Intercept, and serves as a Special Advisor to the EFF — one of the most visible figures in the small world of researchers who defend the surveilled. The institutions that will later cut ties are, in this act, proud to have him.
ACT II — THE REPORTING (OCTOBER–NOVEMBER 2017)
The Verge publishes, then publishes again with the receipts. This act is stated as the reporting's, attributed — and no one who came forward is named here.
-
OCT 13, 2017
The first report
The Verge reports that sexual-assault allegations have been raised against a high-profile security researcher and activist, and that Citizen Lab has moved to sever its association with him. The story is the reporting's; we carry it as such, and we name none of the women involved.
-
NOV 19, 2017
The corroborated report
The Verge publishes a detailed account reporting that approximately ten women alleged sexual assault, describing the reporting as corroborated, and reports that it obtained chat logs it said contained his admission to assaults. The account is The Verge's; it is corroborated and, by its telling, partly admitted — and it is still the reporting's, which is why it wears its source. This file reproduces no accuser's words and no detail of what was alleged.
-
NOV 29, 2017
The decade-long fight
A follow-up reports on the years-long, community-level effort that preceded the coverage — the whisper networks and the women who, in the reporting's own framing, feared they would not be believed. It is the same bitter symmetry the coverage kept returning to: the researcher who documented how the powerful prey on the vulnerable, reported as having done so himself.
ACT III — THE DOORS CLOSE (2017)
The institutions that built their credibility on defending the vulnerable act in days, not months. Every step in this act is documented fact.
-
SEP–OCT 2017
Citizen Lab and the EFF
Citizen Lab and the University of Toronto move to cut all ties after being informed of a sexual-assault allegation; he resigns. The EFF publicly disassociates itself. The organizations that had put him on their masthead take his name off it.
-
NOV 21, 2017
"We stand with the women"
The Intercept publishes a response calling itself “deeply disturbed by the reports of rape and other abuses” in The Verge, noting his employment had already ended, and stating: “we stand with the women who reported the abuse.” The newsroom he helped secure stands with the people who accused him.
-
2017
DEF CON's ban list
DEF CON lists him in its ban notice — “Banned based on multiple public reports” — among the conference's 2017 harassment actions. The scene's largest gathering closes its door with the rest of them. (See DEF CON.)
ACT IV — THE SILENCE (2017–)
Most figures in these files fight back. This one did not.
-
LATE 2017–
No defense, no return
He issued no public rebuttal, gave no interviews, filed no defamation suit, and dropped out of public life. There is no reported criminal charge and no conviction — these are allegations reported by the press, not matters adjudicated in a court. But unlike nearly everyone else in this archive, he never contested the record. The loudest thing about the aftermath is how quiet it was.
both sides, on the record
What the reporting establishes: The Verge reported that multiple women alleged sexual assault, said it had corroborated approximately ten of those accounts, and reported chat logs it said contained his admission — over three articles across October and November 2017 [1] [2].
The institutions agreed there was enough to act: Citizen Lab and the University of Toronto cut all ties, the EFF disassociated, and The Intercept stated it stood “with the women who reported the abuse” — a set of organizations whose entire credibility rests on defending the vulnerable [3] [4].
The record went unanswered: DEF CON banned him “based on multiple public reports,” and he offered no rebuttal to any of it — no denial, no correction, no suit [5].
These are allegations, not adjudications. No criminal charge and no conviction have been reported; nothing here was tested in a court, cross-examined, or subjected to a verdict. What exists is journalism — corroborated journalism, but journalism — and a set of private institutional decisions [1].
He mounted no defense — and we will not invent one for him. Honesty requires saying plainly that the subject did not publicly contest the reporting. That silence is not, in law, an admission, and we do not treat it as one. But it also means there is no on-record denial to weigh against the coverage; the “other side” of this file is thin because he left it thin [6].
The career is real and undisputed. Whatever else is true, the FinFisher and Hacking Team research stands on its own merits and helped real dissidents and journalists. Naming what he was accused of does not unwrite what he documented [7].
YOU DECIDE
This is the case in the wave where the exculpatory side is thinnest, and the honest thing is to say so. The Verge reported roughly ten corroborated allegations of sexual assault and chat logs it said contained his admission; three institutions built to defend the vulnerable cut ties within weeks; DEF CON banned him. Against all of that sits a single, real caution: these are allegations reported by the press, not findings of a court — there was no charge, no trial, no verdict. And a second fact that cuts the other way — he never denied any of it.
Weigh it honestly. Corroborated reporting is not a conviction, and a reader should hold the difference. But a reader should also notice that the man who spent his life proving what the powerful do in the dark went dark himself the moment the light turned around. We keep the reporting. We keep the silence. We name no one who came forward.
The archive does not convict. The archive keeps the reporting, the institutional record, and the absence of any answer — and reproduces nothing of the harm.
evidence locker
THE 2017 REPORTING — ATTRIBUTED, VICTIM-CARE APPLIED
THE INSTITUTIONAL RECORD — STATED AS FACT
Wikipedia — Morgan Marquis-Boire ATTRIBUTED — dated summary: career (Google, Citizen Lab, First Look, The Intercept, EFF), the FinFisher/Hacking Team research, the 2017 reporting, the Citizen Lab and EFF responses, and the aftermath.
en.wikipedia.org/wiki/Morgan_Marquis-Boire
CAREER RECORD + SPECIMEN — STATED AS FACT
Stanford CDDRL — “Cash Rules Everything Around Me” (Nov 29, 2012) SPECIMEN — the talk title used in “In their own words,” his framing of the surveillance-commercialization thesis (co-presented with Bill Marczak). A specimen of his work, not the allegations.
cddrl.fsi.stanford.edu/node/10858
CONTEXT & CROSS-LINKS
The standard. Morgan Marquis-Boire's research career is stated as fact, because it is one. The allegations are stated as The Verge's reporting — corroborated by that outlet and, by its account, partly admitted, but the reporting's nonetheless, and they wear their source on every line. This is the hardest kind of file to keep fair, and the rule that keeps it fair is victim care: no person who came forward is named, described, or quoted, and no detail of what was alleged is reproduced anywhere on this page. No criminal charge or conviction has been reported; nothing here was adjudicated in a court. His silence is stated plainly and is not treated as an admission, and no denial has been invented on his behalf. The burden of proof is on us, not on the people who spoke. If a line here couldn't survive scrutiny, it wouldn't be on this page.