🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #926

Re: Boycotting CERT because of the keystroke monitoring advisory?

#926
From: Jeff Edelheit
Date: Tue, 05 Jan 1993 13:44
52 lines
3257 bytes
In article <1993Jan4.212439.4278@nntp.hut.fi> jkp@cs.HUT.FI (Jyrki Kuoppala) writes:
>
>I have communicated about this with CERT, and they don't seem to think
>my interpretation of the advisory is incorrect.  Thus it seems that
>CERT really supports measures like this, and I repeat and clarify my
>proposal that if it continues to do so, people who value privacy
>rights should not cooperate with CERT and we as net.citizens should
>see if something can be done to get some of the CERT's functions
>implemented in a way that respects freedom and people's rights, and
>also see if a message can be posted to comp.security.announce
>announcing the recommendation not to cooperate with CERT, the reason
>for it, and possible alternatives what to do instead of communicating
>with CERT wrt security holes, vulnerabilities etc.
>
>I don't know who does CERT's policy decisions and how one might
>influence them via other means (possibly organizations like the EFF
>and CPSR could work on this) but I do think the most simple thing to
>do about an organization doing something you seriously disapprove of
>is to stop all support and cooperation with it and suggest others do
>the same.
>
>//Jyrki

While Jyrki has made his posting to all sorts of newsgroups, I have
restricted my response to comp.security.misc.  

It's clear that Jyrki thinks that keystroke monitoring is an invasion
of privacy.  It is also clear, to me, that many Europeans tend to take
a stronger perspective on individual privacy than most Americans tend
to.  (Just look at number and content of western European privacy laws
and compare that to the US statues.)  Also, I refuse to get into a
discussion that one country is better than another for what ever
reason (privacy laws, education statistics, life expectancy,
environmental concerns, etc.)

What distresses me is that Jyrki seems to be condemming (e.g., "stop
all support and cooperation with it and suggest that others do the same") an
organization that has done tremendous service to the international
computing community.   My perception of the original notice was that it
was oriented towards US organizations (public, private, educational) and
that the legal basis of the notice would not necessarily be applicable to the
UK, France, Germany, Finland, Canada or any other nation.  This perception is
based on the understanding that the wording came from a US Governmental
organization.  

You may not agree with the intent of the original message.  However,
does this mean that you should kill the messenger?

Jeff Edelheit		email:  edelheit@mitre.org
The MITRE Corporation	voice:  (703) 883-7586
7525 Colshire Drive	FAX:	(703) 883-1397
McLean, VA   22102
Technical Details
Message-ID: <1993Jan5.134422.7166@linus.mitre.org>
Path: arc1-ca.pugleaf.net!sparky!uunet!spool.mu.edu!agate!linus!linus.mitre.org!smiley.mitre.org!edelheit
References: <1993Jan4.212439.4278@nntp.hut.fi>

Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!spool.mu.edu!agate!linus!linus.mitre.org!smiley.mitre.org!edelheit
From: edelheit@smiley.mitre.org (Jeff Edelheit)
Subject: Re: Boycotting CERT because of the keystroke monitoring advisory?
Message-ID: <1993Jan5.134422.7166@linus.mitre.org>
Sender: news@linus.mitre.org (NONUSER)
Nntp-Posting-Host: smiley.mitre.org
Organization: The MITRE Corporation, McLean, VA
References: <1993Jan4.212439.4278@nntp.hut.fi>
Date: Tue, 5 Jan 1993 13:44:22 GMT
Lines: 52