3 ms·
I'm not sure how to read security == transparency. Now bear in mind that I tend to favour radical transparency, e.g., in government reporting and accountability
by PeterWhittaker 13y ago
I'm not sure how to read security == transparency. Now bear in mind that I tend to favour radical transparency, e.g., in government reporting and accountability, provided that it does not override personal privacy, i.e., data is anonymized, masked, etc....
But there are many cases where transparency != security, or perhaps a better way of putting it would be transparency XOR security.
For example, witness protection programs, police informants, classified military and intelligence information, etc.
In all of these cases, there should be a certain transparency of program governance and policy, with ZERO transparency of program procedure and information details: If you have no need to know, you get to know exactly and perfectly nothing, lest people die.
Like it or not, there are times when transparency is the enemy of security. The trick is documenting those cases well and implementing appropriate policy, governance, and oversight. It's quite a trick.