purplecthulhu: (Default)
Add MemoryShare This Entry
posted by [personal profile] purplecthulhu at 10:46am on 01/03/2003
Various people, including slashdot and [livejournal.com profile] puppytown have reported the leaked email from author Laurie Garrett to her friends concerning her experiences at the World Economic Forum in Davos. There's now a rather interesting commentry on this available at LawMeme which also provides a very useful summary of the story so far.
Mood:: 'awake' awake
Music:: Pan Dance, Jethro Tull
There are 6 comments on this entry. (Reply.)
 
posted by [identity profile] handslive.livejournal.com at 10:57pm on 01/03/2003
I'll admit I'm one of the people who saw that note and thought, "Probably a hoax." If anything it was only a mild surprise to hear it was real. What was surprising to me was that she didn't believe the note would leak out. And that it bothered her enough that she was going to seriously restrict her e-mail usage.

Maybe I've been on mailing lists and Usenet too long. I've always assumed that the stuff I put down would be leaked. I encrypt the stuff I'm iffy about (and acknowledge that I'm not taking sufficient precautions even there, actually, if I wanted to be really paranoid).

How could anyone engage in regular e-mail use much less publishing for a newspaper and not come to the conclusion that sensitive, useful, interesting information always finds a way out unless specific precautions are taken? At the very least an informal statement at the beginning to keep the message private.

I think that's the only thing about the whole incident that really struck me. I'm concerned that a talented, bright journalist has that level of ignorance about interpersonal communications (much less electronic).
 
but most of the precautions that people take are to stop their messages being intercepted by Echelon or IBM or the Men With Black Helicopters or whoever.

She's complaining that *her friends* helped to tell the entire world about her private emails. Do you have a disclaimer on all of your email saying "please don't forward me"?

And various people in the chain seem to have topped and tailed her email so even if there was a disclaimer it would have been "lost".

I hear both sides, but I'm not sure if both sides can hear the other ;)
 
She's complaining that *her friends* helped to tell the entire world about her private emails. Do you have a disclaimer on all of your email saying "please don't forward me"?

But this is my point. My assumption is that the e-mail may be forwarded, misdirected, quoted out of context, stolen, snooped, deleted outside my control unless I take specific steps, the minimum of which would be a disclaimer. Her assumption appears to be that these things won't happen unless she asks them to. So, no, I don't put disclaimers on all my e-mail, but I understand the consequences.

Again, this may speak to how long I've been on the 'net and specifically how long I've been a sys admin. What if none of her friends had been responsible for the forwarding, but one of the addresses she typed in from the hotel was in error? The sys admin glances through another routine bounced message and sees something interesting and forwards it without the names attached. The message may be unlikely to be seen at a large company or ISP, but not for a small department (under a hundred staff) with its own mail server. What I'm saying is that she has preconceived notions about privacy that don't mesh well with the real world.

But lots of people have this brand of misconception so I'm not very surprised by it. What surprises me more is her response of curtailing the use of e-mail. Now maybe I'm not paranoid enough (possible) and she handles such sensitive material day-to-day that this is the only reasonable response. Or maybe this is (as it appears to me) an unthinking twitch response of "Ow! Bad technology! Bad!" Would she stop talking to people on her cell phone if the local cell tower connected her mid-call to someone else while she was in a private (potentially embarrassing) conversation?
 
My assumption is that the e-mail may be forwarded, misdirected, quoted out of context, stolen, snooped, deleted outside my control unless I take specific steps, the minimum of which would be a disclaimer.

The trouble is that I can't see any sane way that she could stop this happening (except not sending the email). Unless you have some draconian Palladium system set up, once her friends have the email they can forward it to whoever they like. Even with this, if they can capture the screen then they can send it on.

Encryption is great, but it only protects against the bad guys. If you're sending email to your friends you want them to be able to read it, but if they can read it then they can forward it.

I think that she may be over-reacting, but I think your analogy is a bit too weak - I think a better one may be "my mobile phone spontaneously broadcasted pictures of me having sex to the entire world, hence I'm going to keep it turned off unless I need to make a call".
 
Ah. Okay, that was an incomplete thought on my part.

Complete thought looks more like:

Given the ease with which eavesdropping, accidental receipt, and misdirected transmission may occur,

And given the tendency of the community at large to assume that what we can do we (should, will, might, want to, etc.) do,

I find that it shows a lack of fore-thought for anyone to engage in electronic communication without both understanding the risks and explicitly stating one's intentions to at least the intended audience.

Her actions and, I believe, the actions of her friends showed the failure of the second point (intent). Her subsequent reaction showed the failure of the first (risk). The assumptions that lead up to these two points are self-evident to me. I am surprised by the extent to which they are not for other people who make extensive use of the same medium. But, as I said previously, I also realize that my view is coloured by my previous technical experience.

Anyway, that's probably enough of that. :-)
 
I think that maybe she was rather naive ;) (but my own mental model of "email is like a postcard - assume it's not secure" doesn't seem to anticipate how easy it is for something to be forwarded around the world).

Thanks for the discussion - nice to be able to have a civilised conversation on the web).

regards

Hack

April

SunMonTueWedThuFriSat
    1
 
2
 
3
 
4
 
5
 
6
 
7
 
8
 
9
 
10
 
11
 
12
 
13
 
14 15
 
16
 
17
 
18
 
19
 
20
 
21
 
22
 
23
 
24
 
25
 
26
 
27
 
28
 
29
 
30