The Hoodie in the Machine
Sam Esmail's hacker drama set its future in 2015, so it had to be right about the tools. It was, and it was wrong about the one thing the story needed.

Nearfi scores Mr. Robot (2015) 8.0/10 as art. Rami Malek's Elliot and Esmail's cramped, off-centre framing make a security engineer's paranoia feel physical, and the hacking is credible. As prophecy, its P(n) is 65%: The attacks, the control-system sabotage and the private money are all real or on their way, but wiping a conglomerate's servers has never wiped anyone's debts.
- Rami Malek's Elliot and Esmail's cramped, off-centre framing make a security engineer's paranoia feel physical, and the hacking is credible.
- Later seasons trade the first season's tight mechanism for conspiracy, a mystery machine and a finale that explains too much.
- Its central wish, a hack that deletes debt, has never come true, while most of its technology has already arrived.
The attacks, the control-system sabotage and the private money are all real or on their way, but wiping a conglomerate's servers has never wiped anyone's debts.
- FAR Destroying or encrypting a financial conglomerate's records erases consumer debt at national scale, and the debts stay erased.
- ARRIVED A hacking group wipes a multinational's computers and data in one coordinated attack, and the company cannot operate normally until it rebuilds.
- ARRIVED Hackers cause physical effects by compromising the control systems that run industrial plants, power grids and buildings.
The attacks, the control-system sabotage and the private money are all real or on their way, but wiping a conglomerate's servers has never wiped anyone's debts.
The pilot is called "eps1.0_hellofriend.mov", and it opens on a man talking to you, the viewer, as if you were an imaginary friend. By the end of the episode you suspect you might be one.
That's Mr. Robot, which ran on USA Network from 24 June 2015 to 22 December 2019: four seasons, 45 episodes, almost all of them written by Sam Esmail, who also directed most of them. Elliot Alderson (Rami Malek) is a cybersecurity engineer at Allsafe in New York, whose biggest client is E Corp, the world's largest conglomerate, and who spends his nights hacking the people around him, out of something between kindness and compulsion. A stranger calling himself Mr. Robot (Christian Slater) recruits him into fsociety, a hacktivist group with one aim: cancel consumer debt by encrypting E Corp's financial data.
It was set in 2015, the year it aired. There's no future in it. That's the interesting part, because the show wasn't predicting technology. It was predicting what we'd do with the technology we already had.
The art: a thriller with its face pressed to the glass
Start with Malek, who won the Emmy for lead actor in a drama. Elliot is a man with social anxiety, depression and a dissociative disorder, narrating a life he can't be sure he's living. Malek plays him with his eyes a fraction too wide and his voice kept low, as if a louder one might wake something up. Slater, who took a Golden Globe for supporting actor, is the opposite: magnetic and sure of himself. The series won the Globe for best drama as well, and a Peabody.
The look does as much as the cast. Esmail frames people at the bottom or edge of the shot and leaves the rest of the frame empty, so a conversation seems to be watched by something just off to the side. Mac Quayle's score, which won an Emmy for the pilot, is all pulse and drone, the sound of a server room that has noticed you. The hacking is the real surprise. Esmail hired working security people, including Kor Adana, Michael Bazzell and James Plouffe, and later a bigger team. Security firms including Kaspersky and Avast praised the result, and Kali Linux and its real tools turn up on screen. Most television hacking is a green rain of nonsense. This looks like people typing into terminals.
The first season is close to perfect. Everything fits: the mission, the Allsafe job that gives Elliot access, the plan to get at E Corp's backups. In one episode Elliot tours Steel Mountain, E Corp's storage facility, to install a Raspberry Pi, and the plan is to raise the temperature of the climate control until the data melts. It's tense and small and a little funny, the way real intrusions are.
Then the show gets bigger and, in places, worse. The second season's long stretch of Elliot not knowing where he is stalls the story. By the later seasons there's a Chinese minister, Whiterose, who also leads the Dark Army, and a machine at a plant in Washington Township, and the series keeps escalating until the mechanism is gone. The two-hour finale turns the whole thing inward: the Elliot we've watched is revealed as a persona his mind built, "the Mastermind", and a good deal of what's said in the last hour is explained to us rather than shown. Some of this is moving. Much of it is a show running out of tidy hacks and reaching for the large mystery. That's the gap between an 8 and a 9.
The prophecy: wipers, grids, and the debt that never went away
The series makes four bets worth checking, and the ledger scores all four.
The wipe. E Corp is taken apart by one coordinated attack that destroys its data. In 2015 this was mostly a thriller device. Since then it has become a line item. The Shamoon malware had already hit Saudi Aramco in 2012, with a group claiming 30,000 workstations. In 2017 NotPetya wrecked the network of the shipping giant Maersk: 4,000 servers and 45,000 PCs were rebuilt, at a cost its chief put at $250 million to $300 million. The show's version was grander and quicker. The capability is documented and has been used.
The grid. Elliot's Steel Mountain scheme depends on a building's climate control being just another computer on a network. That is true. Stuxnet made Iranian centrifuges tear themselves apart, and in December 2015, a few months after the pilot, attackers using BlackEnergy 3 cut power to around 230,000 people in Ukraine for between one and six hours. Whether you could really cook a data centre's backups from a thermostat is another matter, and I wouldn't bet on it. But the idea that the physical world is hackable through its boring parts was right.
The money. E Corp has its own digital currency, E Coin. Real life has produced regulated private stablecoins, and the US passed the GENIUS Act in July 2025 to govern them. But the corporate attempt to compete with national money, Meta's Diem, was sold off in 2022 after regulators said it couldn't go ahead, and the Bank for International Settlements says stablecoins perform poorly as the mainstay of a monetary system. The show saw the idea coming and overestimated the company.
The debt. Here is the miss, and it's the one the story stands on. The whole drama assumes that if you destroy the records, you destroy the debts. Nothing in the eleven years since suggests it works. The Equifax breach in 2017 exposed the data of about 147.9 million Americans and erased nothing. Maersk's wiped network came back from a single surviving domain controller in a remote office in Ghana. A debt isn't a file. It's a contract, and a bank statement, and a line in a counterparty's books, and it survives a lot of burned servers. The real way people have ever cancelled debt at scale is plainer and sadder: Strike Debt's Rolling Jubilee raised $400,000 and bought $13.5 million of medical debt, which it then forgave. That's a smaller dream than fsociety's, and it works.
To its credit, the show half knows. Later seasons show the hack's consequences landing on ordinary people, and Elliot himself ends up working to reverse it. That's its sharpest prediction about work and surveillance: the engineers who keep the systems running are the most exposed people in them, and the one who can see everyone is the last to see himself.
The reading
Mr. Robot is the rare techno-thriller that was better about the present than the future. It was set in the year it aired, it understood how fragile corporate systems were, and it was right that one clever intrusion could do real damage. It was wrong that the damage would be the kind you could choose. Run the ledger and the tools mostly check out, while the dream of a clean reset doesn't.
The first season is a mean little masterpiece. The rest is a long, ambitious and often gripping argument with itself, and it's worth seeing for Malek alone. Elliot opens by talking to an imaginary friend. By the end, we understand what the show has been saying all along: whoever holds the keys to the system still can't be sure he can fix it.
What it predicted, and what happened
Mr. Robot was set in its own present, so most of its technology was already real, and the ledger shows it: wiper attacks and attacks on physical control systems have both happened since. Its core premise is the miss. Destroying one conglomerate's records has never erased anyone's debts, and the evidence suggests it would not.
How this P(n) was calculated
P(n) is the chance that this work's future arrives within 20 years, by 2046. For each prediction we turn our estimate into a probability: arrived is 100%, diverged is 0%, and otherwise the low end of our 80% range counts as a 10% chance, the median year 50% and the high end 90%. Each prediction is weighted 1–5 by how pivotal it is to the story, and P(n) is the weighted average. P50 does the same by 2076. P(n), explained.
| Claim | Prediction · why this weight | Weight | Status · estimate | By 2046 | By 2076 |
|---|---|---|---|---|---|
| MRBT-1 | A hacking group wipes a multinational's computers and data in one coordinated attack, and the company cannot operate normally until it rebuilds. Major: the 5/9 hack drives the first season and sets every later plot in motion, though the debt outcome is weighted separately. |
4 | ARRIVED arrived 2012 | 100% | 100% |
| MRBT-2 | Destroying or encrypting a financial conglomerate's records erases consumer debt at national scale, and the debts stay erased. Core premise: fsociety exists to cancel consumer debt, and the plot of the first season is built on that aim. |
5 | FAR 2090 (2060–2150) | 6% | 31% |
| MRBT-3 | Hackers cause physical effects by compromising the control systems that run industrial plants, power grids and buildings. Supporting: the climate-control attack on the data centre and the later plant plot depend on it, but the story is mostly about people. |
3 | ARRIVED arrived 2010 | 100% | 100% |
| MRBT-4 | A private conglomerate issues its own digital currency as a rival to national money. Texture: E Corp's currency is a subplot of the later seasons that shapes the world without driving the main story. |
2 | ARRIVING 2032 (2028–2045) | 91% | 100% |
| P(n) = P20 = Σ(weight × chance by 2046) ÷ Σ weight = 9.1 ÷ 14 = 65% | |||||
| P50 = 10.6 ÷ 14 = 75% | |||||
Already here today (arrived 1, arriving ½, weighted): 57%.
-
MRBT-1
A hacking group wipes a multinational's computers and data in one coordinated attack, and the company cannot operate normally until it rebuilds.
Weight 4/5 · Major: the 5/9 hack drives the first season and sets every later plot in motion, though the debt outcome is weighted separately.
The Shamoon malware wiped about 30,000 Saudi Aramco workstations in 2012, and NotPetya in 2017 destroyed Maersk's network of about 4,000 servers and 45,000 PCs at a reported cost of $250 million to $300 million. The show's attack was more cinematic than either, but the capability is documented and has recurred. 123
-
MRBT-2
Destroying or encrypting a financial conglomerate's records erases consumer debt at national scale, and the debts stay erased.
Weight 5/5 · Core premise: fsociety exists to cancel consumer debt, and the plot of the first season is built on that aim.
No incident has erased debts. Large breaches such as Equifax copied records rather than destroying them, and Maersk's wiped network was restored from a surviving domain controller in Ghana. Debts also sit in contracts, bank statements and counterparties' own books, so a single lender's data loss does not cancel them. The only debt cancellations on record are legal or bought at a discount, as with the Rolling Jubilee. We treat this as unlikely within 50 years in the show's form. 456
-
MRBT-3
Hackers cause physical effects by compromising the control systems that run industrial plants, power grids and buildings.
Weight 3/5 · Supporting: the climate-control attack on the data centre and the later plant plot depend on it, but the story is mostly about people.
Stuxnet made Iranian centrifuges tear themselves apart, reportedly from 2010, and a December 2015 attack by the group Sandworm, using BlackEnergy 3 malware, cut power to about 230,000 people in Ukraine for one to six hours. Whether a data centre's temperature could be raised enough to ruin its backups, as in the show, is a separate and unproven matter. 78
-
MRBT-4
A private conglomerate issues its own digital currency as a rival to national money.
Weight 2/5 · Texture: E Corp's currency is a subplot of the later seasons that shapes the world without driving the main story.
Private dollar-backed stablecoins already circulate and the US now regulates them under the GENIUS Act of 2025. But the corporation-run version failed: Meta's Diem project was wound down and sold in 2022 after regulators objected. The Bank for International Settlements argues stablecoins perform poorly as the mainstay of a monetary system. The most likely outcome is regulated private tokens beside central-bank money, not a firm replacing it. 91011
- FOR Shamoon. Wikipedia, 2012. Destructive malware overwrote machines at Saudi Aramco; a group claimed an attack on 30,000 workstations.
- FOR The Untold Story of NotPetya, the Most Devastating Cyberattack in History. Wired, 2018-08-22. Maersk rebuilt 4,000 servers and 45,000 PCs; its chief put the cost at $250 million to $300 million.
- CONTEXT The many (surprisingly realistic) hacks of 'Mr. Robot'. Engadget, 2015-08-29. Security professionals' view that the show's hacking is unusually accurate.
- AGAINST 2017 Equifax data breach. Wikipedia, 2017. Records on about 147.9 million Americans were stolen, not erased; the credit files stayed in place.
- AGAINST The Untold Story of NotPetya, the Most Devastating Cyberattack in History. Wired, 2018-08-22. Even a near-total wipe was reversed from one surviving domain controller in Ghana.
- CONTEXT Strike Debt (Rolling Jubilee). Wikipedia, 2014. $400,000 of donations bought $13.5 million of medical debt, which was then forgiven: the real route to cancelling debt.
- FOR Stuxnet. Wikipedia, 2010. Malware that damaged gas centrifuges by manipulating industrial controllers.
- FOR 2015 Ukraine power grid hack. Wikipedia, 2015-12-23. The first publicly acknowledged successful cyberattack on a power grid; roughly 230,000 consumers lost power.
- FOR Fact Sheet: President Donald J. Trump Signs GENIUS Act into Law. The White House, 2025-07-18. Creates a federal regulatory system for payment stablecoins issued by private firms.
- AGAINST Facebook-backed Diem Association confirms it's 'winding down'. Engadget, 2022-01-31. The one corporate attempt at a global currency was sold off after regulators said it could not proceed.
- AGAINST III. The next-generation monetary and financial system. Bank for International Settlements, 2025-06. Concludes stablecoins perform poorly as the mainstay of the monetary system.
Ledger updated 5 Nov 2026. Open this ledger as its own page · The P(n) Board · Method
Themes: Surveillance and scoring · Work
