Rahmat Wibowo gave a 33-minute lecture on doxing and personal data that warns 'criticise the claim, not the address' and that combining scattered data creates new identification, while defending himself over an account whose company source code, name, date of birth and student card he had spread: 'he shared it himself, why do you call it doxing?'

Original post ↗

Rahmat Wibowo gave a 33-minute lecture on doxing and personal data that warns 'criticise the claim, not the address' and that combining scattered data creates new identification, while defending himself over an account whose company source code, name, date of birth and student card he had spread: 'he shared it himself, why do you call it doxing?'

Commentary

He published it on YouTube on 21 October 2026. Minute links open the video at that point.

  • “Their own stupid actions.” He opens as “a citizen who has seen a person’s identity spread overnight because of that person’s own stupid actions”, and laughs (minute 0).
  • Defending himself. In the section answering “the most common question”, he gives the example of “A, that account”, who “put his company’s source code on his public GitHub” and gave out “his name, his date of birth” and “a photo of his student card”: “I’m only responding to what was made public. He’s the one who shared it, why do you call it doxing?” (minute 15–16). He does not name the account. The details match what he had posted about Rahmat Fabhian Aminuddin: the source-code accusation, his student number and date of birth and his student cards.
  • His own slides. The same lecture says “criticise the claim, not the address” (minute 14), lists “no new identifier: quoting, not combining pieces” and “responding to ideas, not reaching the person” among the conditions for using public data (minute 16), warns that combining name, workplace and address “can lead people to someone’s door” (minute 6), and ends with “home addresses, family members and children are not material for criticism” (minute 30).

Transcript

[YouTube video, "Kajian Somasidin : Doxing, Data Pribadi, dan Batas Pasal Membaca UU PDP, UU ITE, dan KUHP baru", 21 October 2026, 33 minutes. Excerpts from YouTube's automatic captions.] [0:00] sebagai warga negara yang pernah melihat identitas orang yang tersebar dalam semalam karena perbuatan bodoh orangnya sendiri [tertawa] (as a citizen who has seen a person's identity spread overnight because of that person's own stupid actions [laughs]) [14:00] Kritiklah klaimnya bukan alamatnya. (Criticise the claim, not the address.) [15:00] Contoh si A itu si akun yang itulah. Dia terang-terangan ngasih source code perusahaannya di GitHub publiknya dia. [...] Ada lagi ngasih tahu namanya, tanggal lahirnya. (For example, A, that account. He openly put his company's source code on his public GitHub. [...] He also gave out his name, his date of birth.) [16:00] Bahkan ngasih bahkan foto dari kartu pelajar. [...] Saya hanya menanggapi apa yang disampaikan ke publik. Kan gitu. Yang nge-share dia kenapa saya bilang doxing? (He even gave out a photo of his student card. [...] I'm only responding to what was made public. Right? He's the one who shared it, why do you call it doxing?) [30:00] Kritik boleh, bahkan perlu, tetapi alamat rumah, anggota keluarga, dan anak bukan bahan kritik. (Criticism is allowed, even necessary, but home addresses, family members and children are not material for criticism.)