Risk

1/25/2006
12:12 PM
Bob Evans
Bob Evans
Commentary
50%
50%

Privacy: Three Cheers For Microsoft, AOL, Yahoo For Doing The Right Thing

First of all, three cheers for Microsoft! The latest news has the company defending its decision to cooperate with the Justice Department in an anti-pornography effort.

First of all, three cheers for Microsoft! The latest news has the company defending its decision to cooperate with the Justice Department in an anti-pornography effort.The company said it limited the material it gave to Justice to "a random sample of pages from its search index and some aggregated query logs that listed queries and how often they occurred," and that it was careful to avoid passing along any information that could possibly be tied to either an individual human or an individual machine or an individual IP address. All proper and above board, don't you think? Well, think again---the dyspeptic critics who first railed against this on the grounds that Microsoft and the others blatantly violated the privacy of their customers have now changed their tune a bit and are saying that it's no longer relevant whether any privacy was violated or not (and even they admit it was not).

Rather, these folks say, it's neither relevant nor good enough that Microsoft and Yahoo and AOL upheld without exception their responsibilities to protect the privacy of their customers---instead, these "critics" say, the issue isn't about privacy after all---it's about trust. And since they've been fully discredited for their initial criticism over privacy violations, they are now trumpeting fresh charges that Microsoft surrendered too easily or rolled over too quickly or knuckled under or chickened out or compromised or sold out or whatever other ridiculous and derogatory interpretation they want to use.

Here's an example from one of these experts/critics/scolds: "Nevertheless, by not pushing back against such a bad request for data, it leaves open the real fear that they might not push back if the U.S. government decided to go on a real fishing expedition in the future. Privacy may not have been lost but trust was." Hey---are you afraid? Have you lost trust? Do you lay awake at night, sweating about the US government going on a real fishing expedition by trampling over Microsoft and Yahoo to find out what normal Americans do and say online? I mean, look at the thousands---or is it millions?---of Americans who've been tossed into dungeons because the dastardly Patriot Act was used to find cross-matches between people who subscribe to "The Nation" and drink Tsing-Tao beer and have checked out "1984" from their public library? To call this absurd is to give it way too much credit.

Yet these scolds would have us believe that Microsoft has pushed us one step closer to the precipice of governmental tyranny by "giving in too easily." Let's see if Microsoft shareholders start dumping the company's stock in support of the "giving in too easily" criticism. Let's see if Microsoft customers start ripping out SQL Server and Word and Outlook because Microsoft "gave in too easily" instead of spending millions of dollars to have lawyers grandstand and give speeches to mollify the "privacy advocates." Lemme say it again: three cheers for Microsoft and AOL and Yahoo for doing the right thing and ignoring those "critics" whose credibility is diminishing as Microsoft's is rising.

And in a strange way, I'm almost looking forward to what the next volley will be from the "critics" when their "giving in too easily" campaign goes nowhere, because I'm curious: what will be left for them to criticize? I lack the imagination to conjure that up, but based on the track record of these public defenders, we can be sure they'll think of something. Based on that track record, my guess is their next effort won't make much sense to most people, it won't have much basis in reality, it'll be framed in highly emotional terms and doomsday contexts, and the media will give it massive coverage. Hmm...perhaps I've been missing the point all along.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
More Than Half of Users Reuse Passwords
Curtis Franklin Jr., Senior Editor at Dark Reading,  5/24/2018
Is Threat Intelligence Garbage?
Chris McDaniels, Chief Information Security Officer of Mosaic451,  5/23/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
[Strategic Security Report] Navigating the Threat Intelligence Maze
[Strategic Security Report] Navigating the Threat Intelligence Maze
Most enterprises are using threat intel services, but many are still figuring out how to use the data they're collecting. In this Dark Reading survey we give you a look at what they're doing today - and where they hope to go.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-11471
PUBLISHED: 2018-05-25
Cockpit 0.5.5 has XSS via a collection, form, or region.
CVE-2018-11472
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has Reflected XSS during Login (i.e., the login parameter to admin/index.php).
CVE-2018-11473
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has XSS in the registration Form (i.e., the login parameter to users/registration).
CVE-2018-11474
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has a Session Management Issue in the Administrations Tab. A password change at admin/index.php?id=users&action=edit&user_id=1 does not invalidate a session that is open in a different browser.
CVE-2018-11475
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has a Session Management Issue in the Users tab. A password change at users/1/edit does not invalidate a session that is open in a different browser.