5 ms·

Why fault? If Facebook is internally transparent and allows all/most of the employees access to all internal documents -- that's good transparency and good comp

Why fault? If Facebook is internally transparent and allows all/most of the employees access to all internal documents -- that's good transparency and good company culture in my eyes. It does put a lot of responsibility on employees: Don't leak internal data, but do express your opinion if something doesn't look right (and yes, perhaps even leak the offending documents if something illegal or clearly unethical is happening in the company)

pluma 7y ago
Facebook's hysterical reaction to the leak suggests the company didn't actually expect anyone to leak information about illegal and clearly unethical business practices. I mean, assuming that Facebook wants to create an environment where employees leak information about unethical business practices is extremely inconsistent with how unethical Facebook has been routinely behaving in the past.
Chris2048 7y ago
> that's good transparency and good company culture in my eyes wrt sensitive information? Possibly even information relating to customers, or technical detail that can be exploited?
- badfrog 7y ago
  > Possibly even information relating to customers, or technical detail that can be exploited? Yeah for sure. Sometimes you need customer information to do your job (e.g. to repro a bug that only one person has seen). Facebook does a good job of making this available easily and quickly people who need it, while auditing and firing anybody who abuses the privilege to access data that is not strictly needed. Regarding technical issues, you want as many people as possible to know about it so that it gets fixed quickly, other people know how to avoid the same mistake, and you build a culture of not keeping your own mistakes to yourself.
  - Chris2048 7y ago
    I didn't say technical issues, I said detail e.g architecture. Not all architectural issues are bugs that can be fixed if known. In any case, building a "culture of not keeping your own mistakes to yourself" won't help when a bug is discovered by someone who intends to exploit it. 0-days borne from internal disclosures are not a "culture" problem.
chewz 7y ago
> It does put a lot of responsibility on employees: Don't leak internal data Mobsters plain and simple.
- bijsv 7y ago
  Companies that try to protect their internal data are mobsters?
bwoj 7y ago
We could apply the old anti-privacy trope and say that people (or companies) that do nothing wrong should have nothing to hide.

pluma 7y ago

Facebook's hysterical reaction to the leak suggests the company didn't actually expect anyone to leak information about illegal and clearly unethical business practices. I mean, assuming that Facebook wants to create an environment where employees leak information about unethical business practices is extremely inconsistent with how unethical Facebook has been routinely behaving in the past.

Chris2048 7y ago

> that's good transparency and good company culture in my eyes wrt sensitive information? Possibly even information relating to customers, or technical detail that can be exploited?

badfrog 7y ago
> Possibly even information relating to customers, or technical detail that can be exploited? Yeah for sure. Sometimes you need customer information to do your job (e.g. to repro a bug that only one person has seen). Facebook does a good job of making this available easily and quickly people who need it, while auditing and firing anybody who abuses the privilege to access data that is not strictly needed. Regarding technical issues, you want as many people as possible to know about it so that it gets fixed quickly, other people know how to avoid the same mistake, and you build a culture of not keeping your own mistakes to yourself.
- Chris2048 7y ago
  I didn't say technical issues, I said detail e.g architecture. Not all architectural issues are bugs that can be fixed if known. In any case, building a "culture of not keeping your own mistakes to yourself" won't help when a bug is discovered by someone who intends to exploit it. 0-days borne from internal disclosures are not a "culture" problem.

chewz 7y ago

> It does put a lot of responsibility on employees: Don't leak internal data Mobsters plain and simple.

bijsv 7y ago
Companies that try to protect their internal data are mobsters?

bwoj 7y ago

We could apply the old anti-privacy trope and say that people (or companies) that do nothing wrong should have nothing to hide.