Security Ethics

[bryant]

Hot rumor: Karl Rove staffers sent email to the wrong address. Instead of mailing whoever@georgewbush.com, they mailed whoever@georgewbush.org. The guy who owns georgewbush.org is apparently not a Bush fan, so the emails are in Greg Palast's hands.

Taking advantage of this, of course, is morally wrong. As one Democratic Senate staffer said:

"They had an obligation to tell each of the people whose files they were intruding upon -- assuming it was an accident -- that that was going on so those people could protect themselves. To keep on getting these files is just beyond the pale."

Yeah, I'm being snarky. That's a quote from the time the Republicans noticed that they had the ability to read Democratic private files by accident. You could make a marginal argument on the premise that the emails were sent, whereas the Republicans had to go get the files from the fileserver, but as a system administrator? I don't buy it.

Comments

[kodi]

I'd think the most important difference between the two events would be that in the 2002-03 incident, there was a mutual professional and public relationship between the parties. I see a fiduciary duty in the first case that doesn't exist in the second.

[bryant]

Hm. While I'd agree that there's a greater fiduciary duty, I don't think the circumstances in the current case are such that it's okay to keep the emails.

I get the moral high ground of having been in the position of getting a /lot/ of email that wasn't meant for me, and happily deleting it all, from back when I was postmaster at Netcom. :)

[kodi]

Yeah, I definitely agree that it was wrong to keep the emails - but I'd certainly have been fine with him just deleting them as they came in, without ever notifying the people that their emails were going to the wrong place. In the earlier incident, merely failing to take advantage of the situation wasn't enough - every Senate employee who was aware of it and didn't say something did something wrong.

[bryant]

Yeah, I'd agree with that.