The Age of Technological Transparency
endychavez writes "Executives and politicians may be starting to realize that privacy is dead and secrets can no longer be kept in the information age. There is always a technological trail, and transparency is pervasive. Just ask Patricia Dunn and Mark Foley. In a piece at eWeek, Ed Cone from CIO Insight talks about the specific technologies that brought them down." From the article: "Foley may have thought his IMs were disappearing into the ether as soon as they cleared his computer screen. Instead, the messages were saved, and his career was ruined, and the House leadership is left to fight for survival. We talk a lot a about transparency as a virtue in the age of the web, and hold it up as a marketing technique and a better way to run an enterprise. Sun's blogging CEO, Jonathan Schwartz, is lobbying the SEC to allow more financial information to be disclosed online. Corporations are using all manner of web-techs to speak more directly to stakeholders. But transparency needs to be understood as more than a slogan or a strategy. It's a reality. It can be imposed on you by the Internet, whether you want to be transparent or not."
There is no guarantee of privacy anywhere in the Constitution- only a requirement that the evidence gathered can't be used against you in court.
SJW: a person who perceives an injustice, and while correcting it, commits a greater injustice.
Anything that catches stupid people is good. I used to tell people years ago, when I ran a computer store: "Don't put anything on the internet that you wouldn't be comfortable shouting across a crowded room." How hard is that to understand? If you can't figure that out, you have no business running a huge conglomerate like HP. Man, oh man.
Mean what you say...say what you mean.
There's a certain amount of irony in that the issue which gets the folks in Congress interested in technology, is watching one of their own get busted because he didn't understand that what he was sending over the "tubes" could be saved at either end.
I guess if you can't convince them that "knowledge is power," maybe we should work on "knowledge is not getting indicted."
"Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
Does this mean all those chat room transcripts where I posed as an eighteen year-old 5'4" 110lb blonde cheerleader on AOL back in 1995 are still out there somewhere. . .?
Expectation of privacy was cobbled together by judicial decisions I believe. You are right, it is not enumerated in the Constitution.
They took it from us. They tricked the gullible majority with that old canard: "Sure, it gives the gov't the power to really fuck you up...but don't worry...we'll only use this power against 'bad guys'".
Blar.
It's been happening for quite awhile. Nearly ten years ago, I had the displeasure of dealing with someone within our organization that was exploiting security holes to gain more access than they should have had. Once we were on to them, we were deluged with evidence - weblogs, files on the PC, program history, and more.
The moral of the story is stay squeaky clean, or assume that some day you'll have to pay the piper. Your wife could be looking at your browser history. Your e-mail could be hacked. Live life as if all your secrets were public knowlege.
It's strange to think that technology really could lead to a more moral society. Usually politicians are preaching the opposite.
I wonder what Sun's non-blogging CEO has to say about this...
I'd like to point out that it is not just the pols and corporations that are learning these lessons... The media as well has and will continue to be 'bit' by this. While they once held a monolpoly on information, recent doctored photos scandals (Lebanon), CBS (forged?) documents, etc.. have all placed added scrutiny to the media's analysis, sources and methods.
"It takes considerable knowledge just to realize the extent of your own ignorance." - Thomas Sowell
http://www.law.umkc.edu/faculty/projects/ftrials/c onlaw/rightofprivacy.html
It starts off:
"The U. S. Constitution contains no express right to privacy. The Bill of Rights, however, reflects the concern of James Madison and other framers for protecting specific aspects of privacy, such as the privacy of beliefs (1st Amendment), privacy of the home against demands that it be used to house soldiers (3rd Amendment), privacy of the person and possessions as against unreasonable searches (4th Amendment), and the 5th Amendment's privilege against self-incrimination, which provides protection for the privacy of personal information. In addition, the Ninth Amendment states that the "enumeration of certain rights" in the Bill of Rights "shall not be construed to deny or disparage other rights retained by the people." The meaning of......"
Foley may have thought his IMs were disappearing into the ether as soon as they cleared his computer screen. Instead, the messages were saved, and his career was ruined, and the House leadership is left to fight for survival.
Well, the bright side of all this is that it brings it home to these people that they need to understand how this technology works, because it's becoming a cornerstone of our society. Ted Stevens, for example, might actually take 5 minutes and find out how the intertubes actually works. (Hint: it's not a truck)
The theory of relativity doesn't work right in Arkansas.
Anyone have details regarding where they found the records of the IM conversations? I know this can be turned on, but I thought that it was generally off by default. The article mentioned that a fellow page helped newscasters get a hold of the conversations, but how?
Obviously his admissions so far don't bode well for him being innocent of the charges, but the media (and people in general) need to tone down the pre-guilt.
honestly, those HP execs wouldn't have had all these troubles if they'd paid more attention to somethingawful and penny-arcade some years back.
there is no need to sign your posts. this isn't usenet. your username is right there above your post. stop it.
The liberal burgeois editor tower of slashdot has been salivating over this story for so long...
....
... news for nerds people... its not about Robots or Source Code anymore...
They ache to be able to present it to the proletariate usersluts
Oh my
Its about another Marxist / MAOist front in the political war to control.
If you do enough shady crap long enough, you get caught eventually. You can be clever about it, but usually people get careless and/orinvolve one or more other parties.
If Folley had written letters to the boy on clay tablets or papyrus, using technology available at least since the age of the ancient Egyptians, he'd still have run the exact same risk. Because he would still have been acting like a creepy, hypocritical pedophile and still would have been committing statements proving that to a semi-permanent medium.
The basic problem is that people like to tell secrets and gossip, and so information leaks out. They drink and they brag, they're indiscreet, often they're outright stupid. We've had the exact same character flaw for a million years: we just cant shut up. It just gets disseminated more quickly now.
This is a good point.
I think what it boils down to is this: the Constitution isn't an exclusive document. It wasn't intended to mean, "everything is illegal, except for a few certain things." They enumerated the really big important stuff that they thought the Government needed to avoid, but they weren't giving Congress a carte blanche to trample on the other rights that people had always assumed that they had.
Unfortunately, the Ninth Amendment doesn't seem to get a whole lot of respect from the USSC or anybody else. It pretty much gets ignored; rather than drawing on the "pneumbra" and other IMO shaky legal arguments, I think it would have safe to just say 'hey, people have always had a certain right to privacy, therefore it's protected under the Ninth Amendment.' That makes it harder to chisel away at established freedoms, even if they weren't one of the top eight that made it into enumerated Amendments, or into the body of the Constitution itself.
"Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
That is silly.
Such a statement is analogous to declaring security dead because systems have been compromised in the past. Like security, the means to privacy must and are continuing to evolve. Adoption of these mechanisms may be a bit behind the curve, but that in no way means that privacy is “dead” for anyone or everyone. In the past, rotational cyphers, Enigma, and “security envelopes” were enough to keep your messages secure (for a while). These days, we have incredibly powerful tools for keeping our data private, we simply have to be willing to use them.
And that is happening. Who does not use strong encryption for conducting electronic commerce? Nobody. As for privacy in email and other forms of communication, eventually, after enough scandals like those recently at Hewlett-Packard, people will adapt to protect themselves. Then the baseline will be raised and those who would wish to violate privacy will resume efforts in advancing the sophistication of their tools. Then those on the privacy side will move on again. This cycle will repeat again and again.
Privacy is an arms race, in a manner of speaking, and just because privacy is behind at times in no way means that it is a lost cause.
Join Tor today!
because they can be saved on the other side...
Secrecy is no more dead than it has been for a long while. There are some people who just don't seem to understand the medium. Sending messages across the internet is not like passing a letter to a person across the table from you. It's more like passing a letter along through a chain of 20 people -- any of which can read it as they handle it. You don't send secret things that way, or if you do, there's this little thing called encryption that you might want to look into. Also, much like a letter, once it is out of your hands you can't gaurantee that it won't come up at some later time when you least want it to. Also, are you _sure_ you can trust the person you're communicating with? Can you even verify that you're talking with who you think you're talking to?
The same basic rules of secrecy that have always applied still apply today. First and foremost, if you want to keep something REALLY secret, keep it to yourself!
Privacy, however, is a different matter.
Fill in your four or five-letter word of wisdom here _ _ _ _ _.
The Republicans have spent so much time destroying our privacy and installing their surveillance state and now they have fallen victim to their own monster.
I suspect they will be huge champions of privacy after this.
--- Grow a pair, liberals... stop letting the Republicans bully you!
Well said.
Now where are the Libertarians to oppose Government interference in the privacy/surveillance arms race?
*chirp* *chirp* *chirp* *chirp* *chirp*...
--- Grow a pair, liberals... stop letting the Republicans bully you!
While there's a point (nothing's ever really deleted), it's, well, wrong. Yes, there exist lots of records out there. What the article misses is that most types of records can be FORGED. E-mail headers. MAC addresses. Some kinds of IM. And that's what a clever person can forge, let alone what someone with access to someone else's account can fake. Or someone who hacks into a box can plant.
The only way any of these logs out there can be considered "proof" of anything is if they're coupled to a strong identification scheme, one in which the user actively participates. Frankly, I don't see that happening soon.
The next generation of privacy will come out of people smart enough to forge the records that people who don't understand technology take as gospel fact.
This is my sig. There are many like it but this one is mine.
My colleagues have bemoaned the efforts by others to "expose" their doings, with the very astute observation that "they could come to the wrong conclusions just exactly what we do." My argument has been that they ALREADY make judgements about you, based on what limited knowledge they can acquire. It's far better to "be transparent" and tell your story the way YOU want it to be understood. They may not buy it (see the other article about Scoble blogging ;), but at least you have a chance to give "your side" of a "discussion" that's happening whether you want it to or not.
Privacy is an illusion.
There exists no way of exchanging information without making judgments. --Bene Gesserit Axiom
"Executives and politicians may be starting to realize that privacy is dead and secrets can no longer be kept in the information age. There is always a technological trail, and transparency is pervasive.
Starting to? No, they realized that long ago -- what they are finally realizing is that they are no longer immune to the effects their legislation has created.
The more bullshit that the administrations, Congresses, and Houses create, the more the community will buck against. We might be fighting the war differently than we would have (or should have) but we are fighting it.
I consider this a miniscule bit of payback for the warrantless wiretaps and the "Patriot" Act.
When the world relies on computers, geeks collectively rule the world. Of course, most of them never use that power, since they'd much rather go home and kill off some demons or spend quality time with their children, but a well-placed geek could have just about every leader in every field (excepting geekdom of course) by the balls.
I am officially gone from
Having evidence on your hard drive these days is pretty much a guarantee of guilt. However, people seem to forget that should someone want to, it is relatively easy to plant information.
You ever piss off a pscyhopathic computer geek and you're screwed.
You'll turn on your computer one day to find illicit files all over the hard drive with timestamps ranging back through history. It'll look like you've been collecting whatever it is for months.
Or hell, someone doesn't like you, they forge their log files on their computer and claim you were sending nasty IM stuff, when the authorities don't see the matching logs on your computer, they will just assume that you cleared them out to protect yourself.
Yup, those timestamps are obviously immutable written in stone and never lie.
--- I used to moderate, then I read the -1 articles and decided having to filter through them was not worth it.
Call me old fashioned, but I don't do these things, I don't have an MySpace account, I don't do any of this stuff. FOR THIS VERY REASON.
I interact with my friends in person. It's a lot more fun and fulfilling.
I don't have to live online, I find and network with folks just fine using very simple tools (phone, visits, post office, and some email). I have emails, sure, and I have some postings here and on news groups. But I try to say only those things that need to be said.
If you have something to say that is potentially embarrasing, don't use the internet.
You can still have privacy. Just don't say things that you want to keep private....
...and you are both carrying tape recorders, which you may or may not be aware of, may or may not know how to operate, and may or may not stay under your control for the indefinite future.
The point is that, whether you *expect* privacy in an IM conversation is irrelevant - unless you take certain active precautions, the data IS being recorded and CAN be accessed by others (not necessarily the govt.)
If someone violates your expectation of privacy they may be rude, immoral, illegal, or evil. That doesn't mean you are not a fool for allowing the data to exist to begin with. If I walk through the worst part of DC at night and get mugged, the muggers are criminals - but I am still stupid. I'd rather be careful and safe than self righteous (sp?) and vulnerable.
"As God is my witness, I thought turkeys could fly." A. Carlson
You know, first it was some Chinese emporer trying to burn the bamboo parchment, then it was Nixon trying to erase tapes (remember those?) from his private discussions. Then it is Ley trying to shred documents and emails. Now it is congressman trying to hide behind the idea that the net is fleeting.
My guess is that in fifty or so years, some senator will be brought down not knowing the two way VOIP product was archiving everything at some central server.
Maybe he should have talked to Senator Gore, who invented the thing. He'd know where all the super sekret filez are kept.
The Kai's Semi-Updated Website Thingy
Foley may have thought his IMs were disappearing into the ether as soon as they cleared his computer screen.
That's a pretty stupid assumption. Why would he think they disappeared? Um, if they disappeared then what would be the point of sending them? He was sending messages to a recipient completely outside his control. They guy obviously got thrills by pushing things to the limit, and flirting with being discovered. It was only a matter of time before one of the recipients simply forwarded the messages onto someone else. IM isn't exactly the most secure medium available, but that is completely a moot point in this case - it's not like the messages were even intercepted by a 3rd party.
The only reason there is "technological transparency" is because of a lack of technical understanding and competence by end users. People that really want to be "technologically opaque" can certainly do so.
Dan East
Better known as 318230.
Speak for yourself.
Personally, I'm not at all convinced. I value my own privacy. Perhaps more objectively, I recognise that no-one is perfect, and if you dig hard enough you can turn up dirt on anyone. I also recognise that most people in the world are basically good, decent people, and I would prefer to respect a reasonable level of privacy and live in a world where we saw the good in people. You can't do that in a world where everyone's whole life story is computerised, often against their will and without their knowledge, and the media delight in data mining on anyone of any conceivable interest (or at least, worth a few more sales).
Now, governments on the other hand, they should have no right to privacy; on the contrary, IMHO they should be required to justify any attempt to withhold information from the public to an independent authority. Businesses should also be subject to much stricter openness requirements than individuals.
If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
it's all fun and games until someone resigns and confronts their alcoholism and related behavioral problems
The headline made me think of a totally different and wholly more positive thing. I think we're approaching an age of technological transparency in another sense as well; being that technology is becoming more and more transparent to the user. You no longer need to understand unix to profficiently utilize a computer for day-to-day tasks. You don't need to know anything about the technology behind antilock brakes or active stability control to benefit from a safer automobile. Information transfer is ubiquitous, and the general public knows only a minimal of communication technology. Most of the best technologies are the ones you don't even know you're using.
m0nstr42.blogspot.com
How to be consistent? One man's treasured "transparency" is another's outrageous "death of privacy". Certainly no technical distinction exists between my IMs, your IMs, and Foley's IMs. Nor is there a technical distinction between the way Foley's secrets were exposed and the way anyone else's could be exposed.
That recent legislation requires your ISP to keep a record of your internet traffic?
They're hoping to confuse just enough people to make a difference.
Democrats should rip them a new one over this and make them apologize.
--- Grow a pair, liberals... stop letting the Republicans bully you!
I regret to say that we of the FBI are powerless to act in the cases of oral-genital intimacy unless it has in some way obstructed the interstate commerce.
J. Edgar Hoover
Obama likes poor people so much, he wants to make more of them.
Privacy falls under the definition of 'life, liberty and pursuit of happiness'.
It may not be removed without due process and probable cause - defined as a) conviction of a crime; or b) you're actually suspected of a crime.
--- Grow a pair, liberals... stop letting the Republicans bully you!
Use a tool such as Off-the-Record Messaging. You get authentication to protect you against man-in-the-middle attacks, strong encryption, and a clever scheme that makes it so that if someone does manage to break a key and read a conversation, or if one of the parties to the conversation snitches, it still can't be proven that you've said anything in particular; the key material for authentication is published after the fact, so that while it's valid at the time you're having the conversation, afterwards anyone could forge a message that would pass authentication. So if someone comes out and says that you said X, and that they have logs and packet dumps to prove it, you can "prove" that you actually said Y, and that you have logs and packet dumps to prove it, and from a mathematical perspective both of your claims are equally credible -- either or both of you could be presenting a forgery. Fun!
Well said. I can't find one error in what you posted. Clinton did set America up for this.
Sadly, the Republicans have not learned this lesson, either.
The USAPATRIOT Act and the REAL ID Act will be especially onerous in the hands of the Democrats, as they will have had more time to actually plan to use it maliciously (as will the Republicans, but they may lose Congress and not have the power to wield it as wickedly as they want).
--- Grow a pair, liberals... stop letting the Republicans bully you!
Unfortunately, that's been rendered effectively null by a vigorous reading of the Commerce Clause, "The Congress shall have Power ... to regulate Commerce ... among the several States". (Ellipses are for clarity, not to torture the syntax.)
Yeap, especially the recent USSC ruling on medical marijuana. And the Justices didn't even feel the need to back their decision by any clause or section of the Constitution though that was the argument used for states rights. Those Justices that ruled against state rights should be dragged out and flogged in a public square. Say maybe a hundred tymes then made to read out loud the Constitution then flogged some more.
Should there be a Law?
have we now advanced technologically to a point where unreasonable searches and seizures are totally unneccessary
Unreasonable searchs and seizers have never been neccessary. Anyone who disagrees prove othewise. Meanwhile to see where unreasonable searchs and seizers can lead just look at NAZI Germany and Stalin's USSR.
FalconShould there be a Law?
it's usually spelled Subpoena, but I think subpeoned better fits our current legal system...
The Republicans have spent so much time destroying our privacy and installing their surveillance state and now they have fallen victim to their own monster.
I suspect they will be huge champions of privacy after this
I curtainly hope so but I doubt it.
FalconShould there be a Law?
I don't see covering up illegal actions as being anonymous speech. Nor do I see information put out in the public sphere of the world of commerce as being anonymous anything.
Where did I say anything about covering up illegal actions? As for commerce, there's disagreement as to whether commercial speech does or doesn't enjoy the same freedom as personal or political speech. Actually USSC rulings are mixed on this, some have limited commercial speech whereas others have said it enjoys the same rights to free speech.
But it wasn't until 1973 that transactions in the public sphere were considered a part of privacy at all; and for the most part that was a disconnect between the law and reality.
Yea I agree there's a disconnect in the expectation of privacy in public domains, people should expect any privacy when they are in public.
FalconShould there be a Law?
What would be the purpose in covering up legal actions? Just paranoia?
Are you willing to publish your SSN, if not why are you covering it up? Also I guess you haven't heard that many potential employers use the net to lookup applicants and see what they've uploaded or said which can disqualify them. Students using Myspace and Facebook along with blogs to upload and post helterskelter are only hurting themself by what they do if they don't take precautions to safeguard their privacy.
Therefore, for instance, abortion shouldn't be private; it is a service provided and paid for in the public sphere. Nor should Mr. Foley have expected his IM messages to be private- not once they left his computer anyway. It's all the same thing.
Abortion is a private matter unless it's done in a public place or is paid for by the public, and I'm against my tax dollars paying for abortions. However I don't know of any government programs that pay for abortions or public places where they are done, I don't know if insurance pays or not, otherwise the cost of abortions are paid for by individuals so they aren't public. As for Foley, I agree. Nobody should expect their electronic communications are private unless they take steps to encrypt it and make sure neither end has the ability to save or print it out. Years ago I used Yahoo Messenger and when I did I saved all of my sessions as well as printed them out, therefore I know not to expect privacy.
Oh I just realized I left a word out when I said " Yea I agree there's a disconnect in the expectation of privacy in public domains, people should expect any privacy when they are in public." I should of said they should not expect privacy in public domains.
FalconShould there be a Law?
I think the rest of the conversation is over; we understand each other's position well, but I wanted to respond to this:
Do you use X10? In part I want the challenge but I also love travelling and would like to access the home system while away, say be able to turn ac or heating on before arriving home when I've been gone for weeks or months. Or check the webcams and what have you for security. Or even to check the status of the electrical system, I want to build off the grid and have a hybrid electrical power generation system, with solar and wind gennies charging a battery bank.
I use a combination of X10, A10, and more traditional wired alarm. When the alarm goes off, it triggers a universal module, which notified Homeseer, and sends an e-mail to my cell phone. Right now the web portion of the system is down due to being on an old Win98 machine that doesn't like my DHCP server, that will change next spring when I get the money to buy the newer version of Homeseer (that runs on XP) and a USB interface to the X10 system (currently running on serial, which is why it's still on a Win98 system). If I had to do it all over again, I'd probably use Linux and Mr. House instead, but I've got several hours of VBS programming on my Homeseer system, so I'm reluctant to change.
SJW: a person who perceives an injustice, and while correcting it, commits a greater injustice.