Securitylab•September 24, 2026•🇷🇺Translated from Russian

How Social Media Recommendation Algorithms Shape Content, Behavior, and Regulation Worldwide

Social media feeds on TikTok, Instagram, and YouTube appear as endless streams of videos and posts, yet the order is determined by algorithms that evaluate hundreds or thousands of potential items to predict whether a user will watch, skip, like, save, or find content interesting. These systems do not read minds but continuously observe behavior and rapidly learn to forecast the next click.

The core issue arises when predictions create feedback loops. A user lingers on a video, the system shows similar content, engagement increases, and after several cycles the feed diverges markedly from that of another user with different habits. Two accounts on the same platform can quickly inhabit entirely different information environments.

How Recommendation Systems Actually Work

Modern algorithms rarely select a single ideal post from the entire internet. Instead, they first generate a candidate pool and then rank items according to multiple predicted metrics. YouTube has long used this architecture, while Meta describes its systems as ensembles of models that select and rank content by predicted utility and likely user actions.

Signals remain practical. TikTok factors in video interactions, follows, comments, shares, video metadata, and device parameters. YouTube incorporates watch and search history, subscriptions, likes, dislikes, “Not interested” commands, and satisfaction surveys. For YouTube Shorts, the platform tracks the share of videos users choose to watch, average duration, and completion rate.

Industrial systems optimize multiple objectives simultaneously rather than maximizing screen time alone. Google has described YouTube models that combine engagement and satisfaction metrics, while Meta employs forecasts for various actions and quality signals.

Do Algorithms Deliberately Promote Anger?

Highly emotional content can spread more readily, with studies linking anger, fear, and outrage to higher diffusion. However, the relationship varies by platform, topic, audience, and measured action. Positive comments on YouTube correlate with longer watch times, while negative tone links to shorter views. Positive emotions sometimes prove more contagious than negative ones under certain conditions.

The greater concern is not a conspiracy to anger users but a feedback mechanism: when a person consistently engages with controversy or alarming material, the model detects the pattern and surfaces more of the same.

The Shift from Chronological to Personalized Feeds

Facebook launched News Feed in 2006 and gradually introduced ranking, culminating in EdgeRank by the late 2000s. The 2009 Like button supplied an explicit preference signal. Twitter added an algorithmic “most relevant” module in 2016, breaking strict reverse chronology. Infinite scroll, introduced in the mid-2000s, removed natural stopping points and, combined with autoplay and notifications, reduces opportunities for deliberate disengagement.

In February 2026 the European Commission preliminarily identified infinite scroll, autoplay, push notifications, and highly personalized recommendations on TikTok as creating risks of compulsive use under the Digital Services Act.

Do Algorithms Create Filter Bubbles?

A large 2020 field experiment on Facebook and Instagram during the U.S. presidential election found that switching users to chronological feeds reduced time spent but produced no comparable shift in political attitudes. A 2026 randomized study of nearly 5,000 X users showed algorithmic feeds increased exposure to conservative content and reduced traditional media posts, modestly shifting some opinions rightward. Small reductions in hostile partisan content measurably lowered polarization, indicating the same ranking mechanisms can either amplify or mitigate conflict.

Effects on Mental Health and the Dopamine Myth

Problematic use of short-video platforms correlates with anxiety, depressive symptoms, and attention issues, yet results vary by age, baseline mental health, content type, and whether social media displaces sleep or in-person interaction. Body-positive content has shown short-term improvements in body satisfaction in meta-analyses. Social reward activates reward-system regions on fMRI, but this does not equate to measured dopamine doses or clinical addiction. Habit formation through variable reinforcement provides a simpler explanation than neuro-mythology.

Regulatory Approaches

China requires platforms to disclose recommendation mechanisms and allow users to opt out of personalization. A 40-minute daily limit applies only to the youth mode on Douyin for verified users under 14. The EU Digital Services Act mandates transparency and at least one non-profiled recommendation option for very large platforms. Russia’s Federal Law No. 408-FZ, effective October 2023, obliges covered services to notify users, publish Russian-language rules, and describe data categories and methods. Roskomnadzor can request access to recommendation systems and order remediation or suspension of algorithmic features.

Practical User Controls and Future Outlook

Users can mark content “Not interested,” reset recommendation profiles on TikTok and Instagram, unsubscribe from problematic sources, and open preferred channels directly. Complete digital detox yields inconsistent results across studies. The most effective approach remains treating algorithmic output as one editor among many, deliberately supplying negative feedback, and cross-checking emotionally charged claims.

Related articles

Habr•Other

Rostelecom Refactors InfoSec Careers: Matching Employee Skills to Evolving Business Priorities

Rostelecom's information security block developed a systematic approach to reassess employee expertise and redirect talent to new roles when business structures change rapidly. In one case, an architect hired for a specific team was reassigned after the unit was disbanded, initially moving to a similar position that did not fully align with his broader competencies. HR-business partner Olga Lapshina examined the specialist's full background, including prior work in audits, methodology development, regulatory documentation, university teaching, and scientific research, plus strong mentoring abilities with younger staff. These skills matched the needs of the methodology department, leading to a transfer supported by an individual development plan and a mentor via the internal Tochka Rosta platform. Within two months the employee contributed improvements that accelerated preliminary InfoSec audits by 30 percent and risk assessments by 20 percent while expanding threat scenario coverage by 10 percent. The initiative demonstrates Rostelecom's emphasis on horizontal career movement and retention of experienced professionals through structured career tracks.

Habr•Other

How to Avoid Becoming the Hero of 'My Program Deleted 800 GB': Safe Recursive Deletion in Bash and Python

A recent Habr article examines dangerous patterns in recursive file deletion scripts that have caused massive data loss incidents, including an 800 GB wipe triggered by Telegram Desktop on Windows. The piece analyzes classic mistakes such as empty variables in rm commands and extra spaces that turned single paths into multiple destructive arguments, referencing the 2015 Steam Linux bug and the 2011 Bumblebee installer error. It provides hardened Bash templates using set -euo pipefail, ${VAR:?} checks, realpath validation, and --one-file-system flags to prevent deletion of forbidden directories or symlinked targets. The Python section introduces a safe_rmtree wrapper that enforces root boundaries, rejects symlinks, uses resolve(strict=True), and checks shutil.rmtree.avoids_symlink_attacks before proceeding. Additional recommendations include dry-run modes, marker files, temporary directory usage, and logging to make deletion operations auditable and reversible where possible.

AntiMalware•Other

Hackers tamper with refrigeration units in European supermarkets, setting temperatures to +50 °C

Attackers gained unauthorized access to refrigeration and freezer control systems in supermarkets across several European countries, including Sweden, Belgium, Luxembourg, and Estonia. In multiple locations they altered temperature settings to +50 °C, risking widespread spoilage of perishable goods. The incidents primarily affected older, unpatched Danfoss controllers that had been connected to networks for remote maintenance. Estonian manufacturer Kitman Coldtech reported that one attack on a legacy Danfoss system was detected and stopped within approximately ten minutes, preventing any damage. Similar intrusions were confirmed by Swedish chains ICA and Coop, following earlier incidents in French supermarkets in October that resulted in product losses. Experts note that legacy industrial controllers remain attractive targets because they are often left exposed once placed online for convenience.

Habr•Other

AmneziaWG Container for MikroTik Routers Delivers Top Performance Six Months After Launch

A developer released an AmneziaWG container for MikroTik devices in February 2026 and has since added major improvements in speed, protocol support, and stability. The lightweight container leverages the router's native WireGuard implementation for cryptography while handling AmneziaWG obfuscation in software. Performance now reaches 250-350 Mbit/s on models such as Hap Ax3 and RB5009B after switching to C code and increasing buffer sizes with RouterOS 7.24. New features include server mode for connecting multiple MikroTik devices, random port hopping, IPv6 support, dynamic DNS, and offline configuration. The project survived an early GitHub ban caused by test scripts and has grown to over 370 stars while remaining fully offline and privacy-focused.