HACKING PROJECT · social · Intermediate
Gamified Media-Literacy / Public-Inoculation App
Build measurable psychological resistance to online manipulation through gamified, inoculation-based training.
People remain highly susceptible to manipulation techniques (emotional exploitation, false dichotomies, impersonation, conspiratorial reasoning), and passive fact-checking arrives too late to stop belief formation. Psychological "inoculation" research shows pre-emptively teaching manipulation tactics builds resistance, but engaging, scalable delivery is scarce. Society lacks accessible tools that build durable resilience rather than reactively debunking.
**What you'll build**
Build a gamified web/mobile app that applies prebunking/inoculation theory — interactive scenarios, simulated feeds, and mini-games where users learn to spot manipulation techniques and generate weakened "doses" of misinformation in a safe context. Add adaptive difficulty, spaced-repetition reinforcement, scoring, and an analytics layer measuring resilience gains, grounded in evidence-based media-literacy pedagogy.
**Objective** — Build measurable psychological resistance to online manipulation through gamified, inoculation-based training.
**Expected outcome** — A deployed interactive app with scenario modules, a scoring/progress system, and an analytics dashboard reporting pre/post resilience metrics.
**Difficulty** — Intermediate — full-stack app plus behavioral-science content design; lighter on deep security tooling.
**Primary category** — Security Awareness / Human-Factors Security; Secondary = Application Development, Behavioral Security
**Security domains** — Primary = Security Research (human-factors / awareness); Secondary = GRC (security awareness), Threat Intelligence
**Technical focus** — Gamification, inoculation/prebunking pedagogy, UX/interaction design, adaptive learning, spaced repetition, learning analytics, content design, A/B experimentation
**Core technologies** — Languages: JavaScript/TypeScript, Python (backend/analytics); Frameworks/Libraries: React/React Native, Node.js, game/state libs (Phaser optional), charting libs; Security Tools: N/A (awareness-focused); Cloud/Infra: Vercel/Netlify, cloud DB, CDN; AI/Data: LLM for dynamic scenario generation, analytics pipeline; Databases: PostgreSQL, Firebase
**Where it's valued** — EdTech, schools/universities, civil society/NGOs, corporate security-awareness programs, public-health & government communications
**Careers it builds toward** — Security Awareness Engineer/Manager, Human-Risk Analyst, EdTech Product Developer, UX Engineer, Disinformation Researcher
**Framework alignment**
• MITRE ATT&CK: N/A for host TTPs; conceptually a countermeasure to social-engineering (defends against Phishing T1566 and DISARM amplification tactics at the human layer)
• NIST CSF 2.0: Protect (PR.AT — Awareness & Training), Govern (security culture)
• OWASP: N/A (standard app security applies — protect user data, session handling)
• CIS Controls v8: Control 14 (Security Awareness and Skills Training)
**Innovation** — Innovative Product — evidence-based inoculation gamification with measurable resilience analytics is a differentiated, scalable EdTech/awareness offering. Scores: Innovation 7/10, Startup 8/10, Enterprise-Readiness 6/10, Patent = Possible.