6 ms·

> For SpaceX to internally segment ITAR from non-ITAR is a huge bureaucratic overhead for them which leads to a possibility of mistakes. They decided to become

> For SpaceX to internally segment ITAR from non-ITAR is a huge bureaucratic overhead for them which leads to a possibility of mistakes. They decided to become an aerospace engineering firm in the US. ITAR security is part of the cost of doing business. If the typical e.g. janitor or cafeteria worker at SpaceX has access to ITAR, as SpaceX seem to have alleged before they got caught, then their ITAR security is pure theater.

dragonwriter 3y ago
> ITAR security is part of the cost of doing business. To amplify this: so is compliance with non-discrimination law, and, to the extent the two interact, the cost created by the interaction.
- thebooktocome 3y ago
  Yes, exactly; thanks.
- SpicyLemonZest 3y ago
  Sure, but shouldn't the government design them to minimize the cost created by the interaction? It seems silly that it's illegal to discriminate against some categories of non-citizens and illegal not to discriminate against other categories of non-citizens.
  - collinmcnulty 3y ago
    I believe it’s because of the different standards of vetting the US government does for attaining refugee or asylum status vs a work visa.
  - dragonwriter 3y ago
    > Sure, but shouldn’t the government design them to minimize the cost created by the interaction? That’s definitely an argument Tesla might want to make to Congress and the State Department (as the relevant regulatory authority for ITAR) as to what the law and regulation should be. “We think a different policy than that embodied in the current law would be better policy” is less useful as an argument to escape the legal consequences of violating the existing law.
    - lsaferite 3y ago
      > That’s definitely an argument Tesla might want to make to Congress and the State Department I'm guessing you meant to say SpaceX and not Tesla.
xoa 3y ago
>If the typical e.g. janitor or cafeteria worker at SpaceX has access to ITAR, as SpaceX seem to have alleged before they got caught, then their ITAR security is pure theater. Why? And why the smarmy elitist discrimination and condescension towards janitors or cafeteria workers? Why would they not be an important part of an organization, professionals capable of getting background checks, appropriate training, and being trusted to keep their mouths shut too?
- collinmcnulty 3y ago
  The principle of least privilege is table stakes for security, and is not a sign of disrespect.
  - xoa 3y ago
    ITAR isn't about security though, at least not the way you and GP seem to be thinking. Classified information is an entirely different kettle of fish. Any American HNer can head on over to Amazon or wherever else and order a FLIR One for a few hundred bucks with free shipping. Also said FLIR One: >https://www.flir.com/products/flir-one-gen-3/ https://www.flir.com/products/flir-one-gen-3/ >"The information contained in this page pertains to products that may be subject to the International Traffic in Arms Regulations (ITAR) (22 C.F.R. Sections 120-130) or the Export Administration Regulations (EAR) (15 C.F.R. Sections 730-774)" ITAR covers a massive array of information and tech available off the shelf. SpaceX definitely will be segmenting heavily stuff specifically for the DOD, but their basic rocketry isn't some classified military project. At most they have useful trade secrets they want to protect but even that probably isn't that critical. They rightfully care about having a good, open, fast startup-like development culture for the rocket work, with animated cooler discussions and napkins being scribbled on during lunch.
  - DiggyJohnson 3y ago
    ITAR includes physical assets. It's not as simple ("table stakes") as partitioning data in a network or filesystem or database.
    - 3y ago
extraduder_ire 3y ago
It's probably not the case in most places, but the custodians/building managers should be cleared to work with sensitive or restricted data. From what I know about pentesting, they usually have the most physical access regardless.

dragonwriter 3y ago

> ITAR security is part of the cost of doing business. To amplify this: so is compliance with non-discrimination law, and, to the extent the two interact, the cost created by the interaction.

thebooktocome 3y ago
Yes, exactly; thanks.
SpicyLemonZest 3y ago
Sure, but shouldn't the government design them to minimize the cost created by the interaction? It seems silly that it's illegal to discriminate against some categories of non-citizens and illegal not to discriminate against other categories of non-citizens.
- collinmcnulty 3y ago
  I believe it’s because of the different standards of vetting the US government does for attaining refugee or asylum status vs a work visa.
- dragonwriter 3y ago
  > Sure, but shouldn’t the government design them to minimize the cost created by the interaction? That’s definitely an argument Tesla might want to make to Congress and the State Department (as the relevant regulatory authority for ITAR) as to what the law and regulation should be. “We think a different policy than that embodied in the current law would be better policy” is less useful as an argument to escape the legal consequences of violating the existing law.
  - lsaferite 3y ago
    > That’s definitely an argument Tesla might want to make to Congress and the State Department I'm guessing you meant to say SpaceX and not Tesla.

xoa 3y ago

>If the typical e.g. janitor or cafeteria worker at SpaceX has access to ITAR, as SpaceX seem to have alleged before they got caught, then their ITAR security is pure theater. Why? And why the smarmy elitist discrimination and condescension towards janitors or cafeteria workers? Why would they not be an important part of an organization, professionals capable of getting background checks, appropriate training, and being trusted to keep their mouths shut too?

collinmcnulty 3y ago
The principle of least privilege is table stakes for security, and is not a sign of disrespect.
- xoa 3y ago
  ITAR isn't about security though, at least not the way you and GP seem to be thinking. Classified information is an entirely different kettle of fish. Any American HNer can head on over to Amazon or wherever else and order a FLIR One for a few hundred bucks with free shipping. Also said FLIR One: >https://www.flir.com/products/flir-one-gen-3/ https://www.flir.com/products/flir-one-gen-3/ >"The information contained in this page pertains to products that may be subject to the International Traffic in Arms Regulations (ITAR) (22 C.F.R. Sections 120-130) or the Export Administration Regulations (EAR) (15 C.F.R. Sections 730-774)" ITAR covers a massive array of information and tech available off the shelf. SpaceX definitely will be segmenting heavily stuff specifically for the DOD, but their basic rocketry isn't some classified military project. At most they have useful trade secrets they want to protect but even that probably isn't that critical. They rightfully care about having a good, open, fast startup-like development culture for the rocket work, with animated cooler discussions and napkins being scribbled on during lunch.
- DiggyJohnson 3y ago
  ITAR includes physical assets. It's not as simple ("table stakes") as partitioning data in a network or filesystem or database.
  - 3y ago

extraduder_ire 3y ago

It's probably not the case in most places, but the custodians/building managers should be cleared to work with sensitive or restricted data. From what I know about pentesting, they usually have the most physical access regardless.