Time Rules for Anonymous Posting

In anonymous posting, time is seen as well as content.

When did you post? Which time periods are you active in? Are you active at the same time as a real-name account? Are you making detailed posts immediately after events?

Time becomes an axis that connects multiple records.

This article organizes how to handle time in anonymous posting.

Posting time reveals daily rhythm

Posting time reveals daily rhythm.

Morning commute time. Lunch break. After work. Late night. Long posts only on days off.

When these patterns continue, daily activity area, occupation, and active hours can be inferred.

If the activity times of a real-name account and an anonymous account overlap, it becomes more likely that they look like the same person.

Posting time is weak information by itself. However, when arranged over a long period, it becomes fairly strong information. If posting stops only during weekday afternoons, work or school hours become visible. If you write long posts at the same time every night, your daily rhythm becomes visible. If activity increases only at specific times on days off, your free time becomes visible.

In anonymity, look at the pattern rather than one posting time. When the times of posts, replies, likes, deletions, profile changes, and image replacements are included, the account's activity rhythm becomes visible. If it resembles the activity rhythm on the real-name side, the impression that it is the same person becomes stronger.

Posting immediately after an event is dangerous

Posting immediately after an event becomes a strong clue.

Right after a meeting ends. Right after a demonstration or gathering. Right after a school event. Right after a workplace problem.

The people who knew at that time, were there, or were able to post are narrowed down.

When anonymity matters, avoid giving detailed information immediately after an event. You need judgments such as waiting, blurring the content, and not releasing information known by only a small number of people involved.

Special care is needed for events with few people involved. For large-scale news, candidates remain broad even if you react immediately. However, in a small meeting, internal workplace problem, school event, or small local event, the people who know details at that time are limited. An immediate post indicates "someone who was there," "someone who was contacted right away," or "someone who could access the materials."

Do not operate at the same time as the real-name side

If you operate a real-name account and anonymous account in the same time period, they become easier to correlate.

Searching on the real-name side. Posting on the anonymous side. Reacting to the same topic on the real-name side. Writing in detail on the anonymous side.

When this flow repeats, it starts to look like the same person.

"Not posting at the same time" is not enough. Posting on the anonymous side immediately after searching on the real-name side. Reacting to the same news on the real-name side, then writing about it in detail on the anonymous side. Activity on the real-name side stopping immediately after backlash on the anonymous side. These movements also become correlation.

In anonymous activity, separate not only accounts, but also the time periods and order of operation. If you handle the real-name side and anonymous side in the same workflow, behavior patterns overlap.

Be careful with scheduled posting too

Scheduled posting is convenient. However, care is needed when using it for anonymity.

You need to log in to a scheduled posting service. The service retains post content and times. If you use the same service as a real-name account, operations may mix.

Even when using scheduled posting to shift time, you need to consider service-side logs and account correlation.

Scheduled posting can be a way to weaken posting-time correlation. However, the time the schedule was created, login IP address, browser used, linked social media accounts, payment information, and similar items remain as separate problems. If you add an anonymous account to a management tool used on the real-name side, operations mix.

If you use scheduled posting, separate it with an environment for anonymous use, an account for anonymous use, and contact information for anonymous use. Also, if you post with the same delay interval every time, that itself becomes a pattern.

Shifting time alone is not enough

Shifting posting time a little does not make it safe.

Delaying it the same way every time. Posting only late at night every time. Writing long posts only on days off every time.

These become different patterns.

The purpose of time measures is not simply to delay. It is to reduce correlation with the real-name side, events, places, and daily rhythm.

When shifting time, think about what correlation you want to avoid. If you want to hide that you are on site, post after leaving the site. If you want to avoid simultaneous activity with the real-name side, avoid handling it in the same work time. If you want to hide the source of internal information, avoid detailed posts immediately after the event.

If the purpose differs, the necessary way to delay also changes. Do not just shift the clock. Separate it from life, place, event, and real-name-side behavior.

What to check before posting

Before anonymous posting, check the following points.

• Are you not active in the same time period as a real-name account?
• Are you not posting in too much detail immediately after an event?
• Does the posting time not reveal daily rhythm?
• Are file creation and edit times not left behind?
• Is the scheduled posting service account separate from the real-name side?
• Is it not becoming the same long-term time pattern?

Look at time together with content and place.

Check after posting too. Do the times of replies and quote responses not overlap with real-name-side activity? Are deletion and edit times not moments only the person involved would notice? Does real-name-side behavior not change immediately after posting?

Time risk does not end at the moment you press the publish button. Post-publication reactions, edits, deletions, apologies, and DM responses are all seen as one timeline.

Look at your own time logs too

When anonymous posting increases, review your own posting times. Are you not posting on the same day of the week every time? Does it not overlap with real-name-side break times? Does posting not increase only right after specific events? Do deletions or edits not always happen at moments only the person involved would notice?

This is practice in looking at yourself like an attacker. The poster tends to focus on content, but people looking from outside also look at time. Simply lining up timestamps can reveal daily rhythm, active hours, topics you react to, and the possibility that you were on site.

Time measures are not about making things completely random. If you keep posting at unnatural times, that also becomes an operational habit. The purpose is to avoid strong connection with your life, real-name-side activity, and event times.

Summary

In anonymous posting, posting time also becomes a clue.

Posting time reveals daily rhythm, and posts immediately after events narrow candidates to participants or people involved. If the activity times of real-name accounts and anonymous accounts overlap, the impression that they are the same person becomes stronger.

Shifting time a little is not enough. Reducing correlation with the real-name side, events, places, and daily rhythm is important.

Related articles