6 ms·

> those files where destined to be leaked somehow the moment they left the NSA Those files were destined to be leaked somehow the moment they were created. >

by mcny 9y ago

> those files where destined to be leaked somehow the moment they left the NSA Those files were destined to be leaked somehow the moment they were created. > Seems like massive incompetence from this user So when we delete production data, it is a process failure[Gitlab postmortem] but when employees at a three letter agency cause spillage, it is a felony? It is wrong on several counts. One: this is data that we should not be hoarding in the first place. We should be helping vendors fix their stuff so the cachet of information automatically loses its value to people who want to get it. Two: Even if we are an axis of evil and don't want to do the right thing, punishing this individual seems like the thing the higher ups at an oppressive regime would do to prevent the wrath of the dictator on themselves for failing to prevent what is really a system failure. [Gitlab postmortem] https://about.gitlab.com/2017/02/10/postmortem-of-database-outage-of-january-31/ https://about.gitlab.com/2017/02/10/postmortem-of-database-o... Edit while I have your attention I would like your support in ending the CFAA https://cfaa.eff.org/ https://cfaa.eff.org/

chimeracoder 9y ago
> So when we delete production data, it is a process failure[Gitlab postmortem] but when employees at a three letter agency cause spillage, it is a felony? Are you equating an accident that resulted in deleted data with someone intentionally taking confidential materials and putting them on an insecure, personal computer?
- williamscales 9y ago
  The Gitlab production data deletion event occurred unintentionally because the system was not designed to make it impossible. Looking at the Kaspersky situation the same way, the leaking of classified documents to Russia occurred because the system was not designed to make it impossible (i.e. by never creating these materials in the first place). GP isn't equating the facts of the events but instead drawing a contrast between the way we treat them.
  - threeseed 9y ago
    Drawing that comparison is asinine though. We treat nude photos differently than photos of a dog. We treat credit card/user information differently than app logs. That's why we have concepts such as HIPAA and PCI.
    - mcny 9y ago
      The point is punishing a person (often near at the bottom of the totem pole) does not fix the systemic problem. In fact, it creates noise which distracts us from fixing the problem. The first step toward fixing a problem is acknowledging there is a problem and identifying the problem. I am very saddened by my inability to communicate this in a better way but punishing this person will not solve any problem except someone somewhere can check a box saying they did their job.
threeseed 9y ago
Yes not all data is the same and gets treated differently. Truly shocking revelation I know.

by mcny 9y ago

chimeracoder 9y ago

> So when we delete production data, it is a process failure[Gitlab postmortem] but when employees at a three letter agency cause spillage, it is a felony? Are you equating an accident that resulted in deleted data with someone intentionally taking confidential materials and putting them on an insecure, personal computer?

williamscales 9y ago
The Gitlab production data deletion event occurred unintentionally because the system was not designed to make it impossible. Looking at the Kaspersky situation the same way, the leaking of classified documents to Russia occurred because the system was not designed to make it impossible (i.e. by never creating these materials in the first place). GP isn't equating the facts of the events but instead drawing a contrast between the way we treat them.
- threeseed 9y ago
  Drawing that comparison is asinine though. We treat nude photos differently than photos of a dog. We treat credit card/user information differently than app logs. That's why we have concepts such as HIPAA and PCI.
  - mcny 9y ago
    The point is punishing a person (often near at the bottom of the totem pole) does not fix the systemic problem. In fact, it creates noise which distracts us from fixing the problem. The first step toward fixing a problem is acknowledging there is a problem and identifying the problem. I am very saddened by my inability to communicate this in a better way but punishing this person will not solve any problem except someone somewhere can check a box saying they did their job.

threeseed 9y ago

Yes not all data is the same and gets treated differently. Truly shocking revelation I know.