Live data from Hacker News

Protecting Against Leakers

schneier.com

1–10 of 56 posts

Re: Protecting Against Leakers

#2
Finding a balance between paralyzingly complicated processes and having to trust single employees with all of your secrets is not easy. I think that's great, since it helps discourage organizations from doing the kind of things that morally outrage their employees.

Re: Protecting Against Leakers

#3
If you are worried about leakers, you probably are doing somehing "bad" and you are aware of it.

Why would anybody even consider giving such tips to `people which can be summed up as evil' is beyond me.

Re: Protecting Against Leakers

#4

If you are worried about leakers, you probably are doing somehing "bad" and you are aware of it. Why would anybody even consider giving such tips to `people which can be summed up as evil' is beyond me.

Pretty much every company has confidential information. When a company administrator sells the internal address book to a recruiter or when a salesperson makes a copy of the prospects database before joining a competitor - that's leaking too.

Re: Protecting Against Leakers

#5
Every nation need secrets but not in that way it is currently handled. There must be a kind of balance like a committee which decides in every single case "should this information be classified or not". When this procedure would be consistently applied there might wont be a prism program. Leakers should get a chance to contact this committee and get exemption from punishment. I hope all of you know what I mean - I know my english is not the best.

Re: Protecting Against Leakers

#6

If you are worried about leakers, you probably are doing somehing "bad" and you are aware of it. Why would anybody even consider giving such tips to `people which can be summed up as evil' is beyond me.

Consider sports teams. They have strategies and plans which they don't want leaked to their opponents. You'd be hard pressed to call them evil.

Re: Protecting Against Leakers

#7
> More surprising than Snowden's ability to get away with taking the information he downloaded is that there haven't been dozens more like him.

Is an assumption on Schneier's part. For all we know there were dozens or more. They may not have released the data or they may have sold it to some foreign agency instead.

Re: Protecting Against Leakers

#8
post #4

If you are worried about leakers, you probably are doing somehing "bad" and you are aware of it. Why would anybody even consider giving such tips to `people which can be summed up as evil' is beyond me.

Pretty much every company has confidential information. When a company administrator sells the internal address book to a recruiter or when a salesperson makes a copy of the prospects database before joining a competitor - that's leaking too.

It would be interesting to consider a world that is truly without secrets, even of obscurity. It's possible we might get there. I think the way companies and so forth do their work could end up being adjusted to cope.

Re: Protecting Against Leakers

#9
post #4

Earlier quoted context omitted.

Pretty much every company has confidential information. When a company administrator sells the internal address book to a recruiter or when a salesperson makes a copy of the prospects database before joining a competitor - that's leaking too.

It would be interesting to consider a world that is truly without secrets, even of obscurity. It's possible we might get there. I think the way companies and so forth do their work could end up being adjusted to cope.

'The dead past'.

Isaac Asimov, 1956.

Re: Protecting Against Leakers

#10
How about being an ethical organization that people would feel morally compelled to support versus harm? How about not creating secrets around ills committed but actually being candid about such issues when eventually discovered and reforming openly? It seems organizational psychology is partly to blame.
Post reply on HN