2 ms·

Why are court orders unreasonable?

• tptacek 14y ago
  Because the tempo of incidents in a real security response practice is very high, orders of magnitude more than the temp of criminal investigations. This is one of those places where I'd suggest you want to be careful what you wish for. Here's why: If we can generally agree that there is a kind of operational network security data that should reasonably be shareable --- say, Netflow records corresponding to a DDoS in progress --- and that data is routinely generated, then requiring a court order to share it routinizes the court order process. When you make a routine out of what was intended to be an exception, it stops being an exception. A court order is a demand from the state that someone do things. We probably want court orders to be on the "right" side of the base rate fallacy.