Slashdot Mirror
Accidental Privacy Spills
ahem writes "A journalist attends the World Economic forum, and writes an email to a few friends. It's a chatty, casual conference report. The conference is a gathering of the 5,000 most powerful people in the world. The report gives a breezy insight into how stuff gets done at that level, and what the concerns are that keep the world's leaders up at night. That email was intended only for the journalist's friends. That email winds up getting plastered all over the net. Here is a very interesting discussion of the implications of this "privacy spill." Make sure you read down to the Epilogue. Here is the email itself." The Lawmeme discussion is quite thoughtful and in-depth, very good reading.
When will people get that email is not secure. Its the digital equivalent of a postcard, but idiots still email credit card numbers and worse.
The "cue the foo posts in 3, 2, 1..." posts will commence with no subsequent foo posts in 3, 2, 1...
This e-mail was intended to be "leaked" so that it gets more attention. Its called constructive journalism. The journalist intended for it to be public, why else would she have written such a lengthy piece?
... that when you pass "personal" notes in the classroom, the teacher might just be paying attention and decide to read it to the rest of the class. This is not a violation of privacy, but rather a misunderstanding of the rules.
Word is bad about saving info. You with find previously deleted text, revisions, computer names, account names, sometime passwords embedded into the document. I would have to say that Word is one of the most insecure formats in which to deliver a message.
BTW - this same way has gotten me past passwords more then once.
Patrick Havens (Mr. 573333 to you.) Graphic Artist / Coder / Father / Journeler
Let's compare it to a real letter, or better yet, a company memo (in dead-tree form), since real letters typically only have one recipient. Let's say a memo gets sent to all 5 members of the HR department of a company. That memo warns that there will be no holiday bonuses this year. It goes on to say that the employees will be informed of this later, but HR is getting a heads-up in advance. Now, one of the HR employees, pissed off about this, decides to scan it, and post it on the company web site. Is he wrong to do this? Most people would say he is, I'll bet.
Now, the question is, why is it so different with e-mail? If I send a printed letter to a friend, I have the expectation that it will not be plastered on bulletin boards around town. If I send an e-mail, people would argue that I can't expect it to remain private. Why? I think the answer is because it's so easy to distribute an e-mail. Clicking the forward button is trivial.
So what's the solution? Disclaimers and confidentiality statements like some companies have on their e-mail? Doubtful. Even if they would hold up in court, who's willing to fight it? How about some sort of flag that specifices whether a message can be forwarded? That smacks of DRM, and no one's going to like that, nor will every client implement it. PGP? Well, that's nice, but once the recipient decrypts it, it's plain text, which can be forwarded. As much as it sucks, we may just have to rely on personal judgement.
So was the person who forwarded her e-mail a jerk? Probably. Should he have asked permission of the author? Definitely. Is there anything that can be done about it? Nope.
There is no sig, there is only Zuul.
Except that in the case of email, you can't. Repeat after me, kids:
All you can do is make it difficult or illegal. But give me the most-secure email system, and I can probably do any of these:
But by all means, if someone wants to develop a huge expensive system that "guarantees" uncopyable email, be my guest. It'll be good for laughs.
I'm a bloodsucking fiend! Look at my outfit!
I've just skimmed the article (which seems quite good) and read the letter. I can think of a number of reasons the author wouldn't want an e-mail to slip out, but now that it has, I have to say:
:)
That was a damn fine read.
Sure, it could use some editing, but it's not that bad. It's easy to find worse in the print press, let alone on the internet. Besides, that's just form and style... content is what really matters.
And in content, it is actually very interesting and eye-opening. I would be delighted if the author were to write a more lengthy and involved piece on WEF in Davos that actually *is* intended for publication. After this little debacle, it's sure to get a lot of exposure, and I bet she's got a lot more she could say on the subject.
(And sure, the fuss may have all been a marketing gimmick for a forthcoming article. I don't really care, because if so it was really well done!
With reasonable men I will reason; with humane men I will plead; but to tyrants I will give no quarter. -- William Lloyd
It's much better than it used to be. Years ago, I used the "strings blah.doc" trick on a Word file an office mate had sent me. What I found was that in addition to the text he intended, a bunch of his email headers were included! He of course blamed Eudora, because Microsoft certainly wouldn't be at fault.
It turns out that Windows didn't use to bother zeroing out RAM when it handed it over to an application, so I guess at times you could call malloc() and get random junk from other running applications. And Office of course doesn't actually write files out in a known format, it pretty much just dumps memory out intact (which is why it's such a pain to reverse engineer the file format). The combination of the OS not clearing RAM and Office writing out memory which it had allocated but never bothered using resulted in email headers in Word documents. This was fixed years ago, of course. I kinda missed it, though. I still routinely run strings on Office docs to see what shows up.
At its peak, about once every few days (slower since the dot-bust), I'd get a message directed to an address that bounces into my postmaster recycle bin containing all sorts of wonderfully cool private information: business plans, financial spreadsheets, customer contact lists, credit reports. Obviously, this was intended for the identical address at the VC firm, but the sender (wrongly) presumed that they could shorten that to just stonehenge.com.
What's odd is that nearly every time I responded with my curt message of "hey, you shouldn't be sending private info with big financial impact without either verifying the recipient or encrypting the data", they would come back at me, like it was my fault! Weirder, they'd ask me what the proper email address was, like I knew (or cared).
I spent about 20 minutes one day talking with the IT director at the VC company. I tried to make him understand that ultimately, it was his company that might be held liable for not making their email address clear to the clients they were dealing with. But he seemed to think that all I needed to do was agree to forward the misdirected email. We never did agree on that.
I still get misdirected emails for a video production house in Canada as well.
Why don't people understand that every character in an email address matters?
Uhm, no, you are mistaken in your understanding of malloc. This is the standard for malloc:
Taken from malloc (1).
It is not the operating systems responsibility to clear the memory of something recently allocated, and it is good programming practice to set the bits to 0 after a malloc unless you know for a damn well certainty that you will fill the entire segment.
Dacels Jewelers can't be trusted.
Any time we release a document to any other group of people, inside work or out, we are 'encouraged' to copy all, paste into a new document. That document is then password protected from editing (weak, I know, but it shows diligence). Only then is it to be sent out.
:)
Of course, following all of that is a royal pain in the arse, so it only gets done on vendor communications and whatnot, and typically it's iffy then. But it is funny to see a template that had gotten hit by a virus from my boss once- I called him up and had him panic about having another bug on his box
Not really in the personal privacy sphere but I once saw a DEA document that they published in PDF with the name of their agents blacked out. in Acrobat the names were actually blacked out but in OS X preview app you could see them.
I know absolutely nothing about PDF but I assume they have layers.
Ironically it was a report about some Israelis trying to gather information on DEA agents and there they had all their names and addresses published in the internet.
Still, I'm glad I've read it... it's decent news coverage of such a relatively important event. I mean, good use of sources of all types is what journalism is all about... Thanks, Laurie! :-P
Incidentally, this diatribe is from someone who posted a personal note from ex-President Clinton on her website. Presumably with permission, natch, but it's no less private by nature.