From kadie Tue Jul 23 23:45:07 1991 To: cafb-mail Subject: Computers and Academic Freedom mailing list (batch edition) Status: RO Computers and Academic Freedom mailing list (batch edition) Tue Jul 23 23:44:26 EDT 1991 In this issue: "Dean Gottehrer" < : Drawing the line Dolfyn of the Dese : haven.umd.edu!uvaa : Re: Reading files/making backups Aydin EdguerFrom: "Dean Gottehrer" Subject: Drawing the line I plead guilty to William Hugh Murray for staking out the rhetorical high ground. It usually is a pretty easy place from which to defend your positions, unless you climb a tree and walk out on a rhetorical limb. Perhaps I have stepped out on that proverbial limb, but let me see if I can edge back to the trunk. In the continuum of behavior from responsible, moral, ethical and legal to irresponsible, immoral, unethical and illegal, there are extreme behaviors worthy of defense. Others extreme behaviors are illegal and unworthy of defense. (That may sound obvious, but remember Martin Luther King also taught us there are illegal behaviors worthy of defense.) Clearly not all speech and all behavior are defensible. In fact, in my work I deal with convicted murderers, rapists, child and wife abusers, thieves, drug users and pushers on a fairly regular basis. Society has clearly condemned their behavior. Mr. Murray asks me to define where I would draw the line between speech and behavior I would tolerate and that which goes beyond the bounds. A good place to start to draw the line is between your fist and my nose. Amanda Walker in her post today used Mill's concept of harm, which appeals to me. The limits the U.S. system of law has historically placed on speech were related to harm. Harm my reputation and I can sue you for libel (although that right has been greatly limited and you must knowingly disseminate false information about me for me to be successful in my suit against you). Harm the society by advocating violent overthrow of the government and beginning to act and you can be punished. Society has decided harms were likely to be suffered by at least some if pornography and obscenity were permitted. The short answer to Mr. Murray's question is that distinctions can be drawn between extreme behaviors. Most I personally find worthy of punishment are already illegal. Government can punish those who harm others. But I would not use the power of government (any government, and I consider administrations at state universities to be government for this purpose) to punish extreme speech or behavior that does not cause demonstrable harm. Those were the areas I referred to when I said we need to defend them. Beyond those areas, a class of behavior involving computers is extreme and not defensible and probably ought to be made illegal. Laws relating to technology will probably never be up to the moment with the new opportunities for behaviors technology presents us with that ought to be illegal. And of course penalities can vary as crimes vary in their seriousness. Another class of behavior and speech, however, that I personally would not defend as civilized worthy of decent folk is extreme but worthy of political defense. That is the speech that is rude, even perhaps obscene, but that our freedom guarantees. I have a very difficult time drawing a line outlawing the use of words of ideas. I'm willing to guarantee the rights of those I hate, who hate me, who oppose everything I stand for and to guarantee their right to voice those thoughts publicly. There are those who would draw lines between political and non-political speech. That is extremely difficult to accomplish. Who will have the power to draw the line? What is political to one person is not to another. I'm much more comfortable not drawing that line and allowing all speech that the courts have not determined to be illegal. That means that we must tolerate ethnic, religious and racial insults to preserve freedom of speech, a far more important value in my opinion that the academic freedom I hold quite dear. I have fought the racist pigs. The beauty of our government is that those same racist pigs are guaranteed the right to their opinions and to voice them subject only to time, place and manner restrictions applied evenly and equally to all. If they lose their freedom, I'm likely to lose mine. The limit of their freedom begins where their fists collide with the noses of their victims. If speech fails is assault justified? Greater minds than mine have tackled that question. Tyranny that resists the persuasion of speech can be toppled with violence. The very existence of our country is evidence of that. Jefferson believed periodic revolutions would be good for the country. So while assault might be justified, we are correct is trying to avoid it and in sanctioning it. Mr. Murray also raises several questions about the net and attacks on it. My knowledge of computers and the nets is about the same as my knowledge of cars and their motors. I'm a pretty decent driver, but don't ask me to take my truck apart, repair it and put it back together. While there are behaviors not now illegal that ought not be tolerated and eventually made illegal, I don't know enough to know what they are and define them. Computers may be special cases where actions that might be acceptable in other contexts should be unacceptable and illegal here. No all motives or intentions are equal. But how are we to judge among them? Is a hostile act on a computer committed in all innocence worthy of different treatment than the same act done for political reasons? How should they be treated or punished differently? Authority is not inherently repugnant to freedom. A balance needs to exist for freedoms to continue to be exercised. The courts recognize that constitutionally guaranteed freedoms can conflict and they are experienced at balancing them. Sometimes authority ensures that freedom can be exercised, as when the police hold back mobs that would like to hurt those saying thoughts the mob cannot tolerate. At other times, authority prevents actions from being taken. You can't yell fire in a crowded theater when there is no fire. The paradox of freedom is that you cannot only guarantee it to those who would act responsibly. You would soon have no more freedom. You must guarantee it to those who would be rude, outrageous, and gratuitous to simply test its limits. They ultimately will cause far less damage to our society than other more insidious influences that operate much more subtly. We are in far worse shape as a society because the impact of television on the family and the need it creates in our young for drugs to make life interesting every second (as it is on TV) than from the extremists who have a difficult time finding a platform from which to speak to more than a few of their friends. Finally, let me return to an area where Mr. Murray and I were in agreement from the beginning--the need for responsible models and responsible behavior. We set legal limits to punish those who will not be otherwise influenced to behave responsibly. But there is no substitute for those who show others how to do it responsibly Part of the problem we have seen in the discussions on this forum is that the technology is so new and its application so recent that we have had precious little time to transfer models of responsible behavior from other endeavors to this one. Those models are at least as important as the laws, if not more so. Laws will tell us what is legal, models will provide ethical and moral examples of what is right. Freedom may not be the ultimate value in helping us answer difficult questions, but it is pretty high on my pantheon--still. Dean M. Gottehrer Anchorage, Alaska ------------------- Received: from Arizonet by Arizona.edu with PMDF#10282; Mon, 22 Jul 1991 09:10 MST Date: Mon, 22 Jul 1991 09:10 MST From: Dolfyn of the Desert Message-Id: <8C6D29A6828062A7@Arizona.edu> please remove me from this list ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 22 Jul 91 16:51:03 GMT Message-Id: <1991Jul22.165103.25198@murdoch.acc.Virginia.EDU> Organization: Department of Astronomy, University of Virginia From: haven.umd.edu!uvaarpa!murdoch!fermi.clas.Virginia.EDU!gl8f@purdue.edu References <1991Jul18.005728.24196@colnet.uucp>, <1991Jul18.191611.6084@murdoch.acc.Virginia.EDU>, <1991Jul21.183642.1096@colnet.uucp>aarpa Subject: Re: Reading files/making backups In article <1991Jul21.183642.1096@colnet.uucp> res@colnet.uucp (Rob Stampfli) writes: >In response to my original posting, I received email from Helen C. O'Boyle, >the author of the message which prompted my comments. In her email, she >clarifies that the proposed policy was more detailed than originally >described, and allowed for certain administrative functions like backups. Ah. This makes much more sense -- at the beginning it looked like everyone was talking past each other, when in fact both sides know the difference between making backups and chasing crackers, and are disgreeing on how to chase the latter. I don't think I need to read other's email to chase crackers, but I must be strange. ------------------- From: Aydin Edguer Message-Id: <9107221912.AA06451@charlie.CES.CWRU.Edu> Subject: Re: your mail Date: Mon, 22 Jul 91 15:12:41 EDT X-Mailer: ELM [version 2.3 PL6] > >In response to my original posting, I received email from Helen C. O'Boyle, > >the author of the message which prompted my comments. In her email, she > >clarifies that the proposed policy was more detailed than originally > >described, and allowed for certain administrative functions like backups. > > Ah. This makes much more sense -- at the beginning it looked like > everyone was talking past each other, when in fact both sides know the > difference between making backups and chasing crackers, and are > disgreeing on how to chase the latter. I don't think I need to read > other's email to chase crackers, but I must be strange. A cracker's electronic mail can give strong clues to their identity. It can also help locate associates and colleagues and track their activities. But reading their electronic mail is a relatively minor violation of privacy compared to other activities. One important way of tracking system crackers and determining how they operate is to actually watch the exact keystrokes being made by the intruder. Readers of "The Cuckoo's Egg" will recognize this tactic as being a useful tool for determining the extent of a security breach. In neither of the above cases would one want to notify the cracker of the facilities actions. An important way of tracking down network problems is to use a protocol analyzer or "sniffer". The sniffer works by capturing packets traveling over a network segment and then displaying the packets of interest. We trust the engineers to be ethical when doing this task and most network engineers would say they could not do their jobs properly without a network analyzer. If you stop and think, both reading packets on a network and reading keystrokes of from a modem/terminal would be considered invasions of privacy of a much broader nature than accessing a user's files. And yet both are accepted and acceptable practice in the field. Rather than trying to limit a facilities choice of actions in extreme situations, rules should [IMHO] focus on limiting what is done with the information that might be gained. Writing rules for the extremes is always a bad idea. Witness all the attempts at making computer viruses illegal without making "rm/del" illegal or branding anti-viral authors criminals due to their collections of viruses. The ECPA does a reasonable job of trying to limit the abuse of power available to administrators. It does not say that reading electronic mail is unlawful for administrators, it says that using that knowledge or disclosing that knowledge is unlawful. Aydin Edguer ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 22 Jul 91 19:18:33 GMT Message-Id: <3522@sparko.gwu.edu> Organization: The George Washington University, Washington D.C. From: seas.gwu.edu!sheryl@uunet.uu.net References: , <1991Jul12.222703.6825@eff.org>, <14104@uwm.edu> Subject: Re: Ohio State In article <14104@uwm.edu> jgd@uwm.edu writes: >From article <1991Jul12.222703.6825@eff.org>, by kadie@eff.org (Carl M. Kadie): >> >> In article <1991Jul11.153712.9886@eff.org> you write: >>>Remember how this all started. Mr. Brack reformatted the system manual >>>pages on an HP workstation. >>> >>>Academic Computer Services's (ACS) viewpoint: Mr. Brack vandalized the >>>system. >>> >>>Brack's viewpoint: It was an accident; I assumed it would only >>>reformat only my personal manual pages. If reformatting is such a >>>terrible thing to do, why are the file permissions set so that anyone >>>can do it? > >This puzzles me. Why is reformatting manual pages considered an >"actionable offense" by Ohio State's ACS? (Has anyone commented on >that? If so, I must have missed it. A pointer to, or copy of, such >comments would be appreciated.) How does one _read_ a manpage if it >is _not_ formatted? Is this, perhaps, a problem of lack of sufficient >disk space for the formatted manpages? If not, what _is_ the problem? > I haven't seen any replies on this either, so here goes and my apologies to the net if it's been done. In general, man pages are written in nroff and stored on disk that way. The "man" command runs the file through nroff and pipes it to "more" so that you see it in a useful format on your screen. (I'm describing function, not code, because I haven't seen the code). So the pages ARE formatted, but they are transient -- they don't take up space on the disk. > >On all the Unix systems I am familiar with, one *must* format a >manpage in order to (intelligibly) read it. > >Since HP was specifically mentioned, am I correct in assuming this >workstation is running HPUX? I only know of HPUX by "reputation" >(as told to the net by others, and what I hear isn't particularly >flattering); I have no personal experience with HP UNIX products [1]. >Bearing this in mind, I ask if this manpage situation is yet another >way in which HP treats things in their own unique way -- "differently" >than other Unixen? > HP-UX is "different" in many ways, some good and some annoying. I think a lot of it depends upon what "culture" you were brought up in. I worked with HP-UX for about 5-6 years before I saw another flavor of UNIX. Whether HP is better or worse depends upon what you're trying to do with it, although in general I can see how it would be REAL upsetting to people who were BSD worshipers. The manual pages are stored in up to 4 different formats under HP-UX, with a different set of directory structures for each type. They are nroff, compressed nroff, formatted and compressed formatted. There is no duplication between nroff/compressed nroff or formatted/ compressed formatted, but there can be between nroff/formatted and compressed nroff/compressed formatted. I assume that the "man" program uses "cat" instead of "nroff" as a filter to "more" since HP decided to name the formatted directories "cat*" and cat*.Z" where the unformatted directories are in the form "man*" and "man*.Z", where * is the manual section (also a little different under HP-UX). Of course, the compressed pages would have to pass through an "uncompress" filter. By default, the systems are set up so that the first time a user runs "man" on a command the file is formatted and stored in the corresponding structure. The unformatted file is not harmed. This can be a nice feature if the man command is used frequently on certain commands, because the access is much faster. Depending upon the availability of disk space, some sites let the default go on, some go ahead and format everything and some disable the formatting entirely by removing the parallel directories entirely. I have operated in all 3 modes depending upon the situation. I have had users format all of the pages before. In one case I am thinking of, the user came from a system where they kept formatted pages around and thought he was taking care of an oversight. I left them formatted until we needed the space, then I "zapped" them. If the description in the quote is accurate, it is safe to say that the admin went overboard. If you're close on disk space, the admin can easily disable the formatting entirely by removing directories. If a user formats the man pages it might be annoying, but it's hardly vandalism. Any way I can think of that a user might format everything, the original versions are not replaced. The problem with my saying this, though is that I wasn't there and don't know exactly what happened. Even the original poster didn't seem to say how he did it, and we haven't seen the admin's side. -- Sheryl Coppenger SEAS Computing Facility Staff sheryl@seas.gwu.edu The George Washington University (202) 994-6853 ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 22 Jul 91 23:31:14 GMT Message-Id: <1991Jul22.233114.9146@visix.com> Organization: Visix Software Inc., Reston, VA From: visix!news@uunet.uu.net References: , <1991Jul22.165103.25198@murdoch.acc.Virginia.EDU>ool.m Subject: Re: your mail edguer@alpha.ces.cwru.EDU (Aydin Edguer) writes: The ECPA does a reasonable job of trying to limit the abuse of power available to administrators. It does not say that reading electronic mail is unlawful for administrators, it says that using that knowledge or disclosing that knowledge is unlawful. I agree. One thing to think about here is how other kinds of invasion of privacy are treated. For example, the idea of "probable cause" constrains when law enforcement officials can violate privacy, and "extenuating circumstances" can balance something that would otherwise be punished. These tested legal principles can, I think, be quite easily applied to the problem of file and email privacy. -- Amanda Walker amanda@visix.com Visix Software Inc. ...!uunet!visix!amanda -- "Experience is a good teacher, but she sends in terrific bills." --Minna Antrim ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: Mon, 22 Jul 91 16:02:27 GMT Message-Id: <1991Jul22.160227.12830@tygra.Michigan.COM> Organization: CAT-TALK Conferencing Network, Detroit, MI From: zaphod.mps.ohio-state.edu!hobbes.physics.uiowa.edu!news.iastate.edu!sharkey!tygra!jp@uunet.uu.net References <1991Jul17.171651.14481@cs.umb.edu>, <1991Jul17.233857.27897@mailer.cc.fsu.edu>, <1991Jul18.142812.21327@ms.uky.edu> Subject: Wayne State Just Ignores Student Rights (was Re: Ohio State) In article <1991Jul18.142812.21327@ms.uky.edu> morgan@ms.uky.edu (Wes Morgan) writes: " "A brief examination of the current "Student Rights and Responsibilities" "(which stays in my desk as a reference), reveals a complete description "of the procedures for implementation *and* appeal of University actions "against students. " "I would think that most Universities make a document such as this "available to all students, either via surface mail or during the "student's advising/registration/enrollment procedures. " " You know, all of the rules and student rights policies and "rights to a fair hearing" make no difference when the entire chain of command summarily ignores those rights. I know of a case at Wayne State University, in Detroit where that has happened. Students with greivances go first to their department head, then to the deans office. The student has a RIGHT under the "Student Due Process Policy" to have a formal hearing and to be able to call witnesses. Those witnesses, if employees or students of the University, are compelled to be there. In this particular case (involving computer access), the Ombusdman's office ran into a brick wall at EVERY step of the procedure!! * The department head didn't want to hear about it. He said "go see the Dean". * The Dean said she could do nothing and refused to schedule a hearing. * The Vice Provost didn't know what the hell the Ombusdman was talking about. "Due process policy? Never heard of such a thing!" * The matter was taken to the Board of Governors, since it was their policy which was being circumvented. It didn't get past their executive secretary who just referred it back to the Ombudsman's Office for resolution. It seems that at Wayne State University, there is a shadow policy which goes along with the Due Process Policy. This shadow policy must be a set of rules outlining how the various departments are to avoid actually implementing the Due Process Policy. The result: (last I heard): Litigation will begin in the courts this autumn if the University fails to respect the student(s) rights after being given one last chance. The moral of the story: BEWARE: It doesn't matter how finely crafted your "Students Rights and Responsibilities Policy" is: There is often a conspiracy of "good old boys" who have an unwritten agreement to "help each other out" and avoid having to answer for their crimes. In the case of Wayne State University, the corruption runs the entire chain of command, from the departmental level right on up to the Board of Governors. -- CAT-TALK Conferencing System | "Buster Bunny is an abused | E-MAIL: +1 313 343 0800 (USR HST) | child. Trust me - I'm a | jp@Michigan.COM +1 313 343 2925 (TELEBIT PEP) | professional..." | ********EIGHT NODES*********** | -- Roger Rabbit | ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 23 Jul 91 19:51:36 GMT Message-Id: <23.Jul.91.155137.81@cogsci.cog.jhu.edu> Organization: JHU Cognitive Science Center, Baltimore, MD From: cogsci!wjb@umd5.umd.edu References <16989@life.ai.mit.edu>, <1991Jul19.181817.5287@murdoch.acc.Virginia.EDU>, <6620@gazette.bcm.tmc.edu> Subject: Re: Administrator Access (Was Re: Ohio State) In article <6620@gazette.bcm.tmc.edu> rick@pavlov.ssctr.bcm.tmc.edu (Richard H. Miller) writes: >What I would like to see is a rule that under normal circumstances, the >system administrator is not allowed to access the contents of users' >data w/o permission but, in an emergency, the site administrator is allowed >to do it but must inform the affected user(s) as soon as practical. As both a system administrator and a user this seems quite reasonable to me. The only thing I would add is that if a users' data has been accessed as a result of an emergency situation that the user must be informed of that access after the emergency has been alleviated or a fixed time period has passed. (a week or two?). The user should also be informed what emergency required this action. This would probably even cover investigating possible "crackers" as that would seem to be an emergency situation. Bill Bogstad ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 24 Jul 91 01:01:24 GMT Message-Id: <17183@life.ai.mit.edu> Organization: The Internet From: wupost!usc!samsung!think.com!snorkelwacker.mit.edu!ai-lab!wookumz.gnu.ai.mit.edu!helen@uunet.uu.net References <1991Jul19.181817.5287@murdoch.acc.Virginia.EDU>, <6620@gazette.bcm.tmc.edu>, <23.Jul.91.155137.81@cogsci.cog.jhu.edu> Subject: Re: Administrator Access (Was Re: Ohio State) In article <23.Jul.91.155137.81@cogsci.cog.jhu.edu> wjb@cogsci.cog.jhu.edu writes: >In article <6620@gazette.bcm.tmc.edu> rick@pavlov.ssctr.bcm.tmc.edu (Richard H. Miller) writes: >>What I would like to see is a rule that under normal circumstances, the >>system administrator is not allowed to access the contents of users' >>data w/o permission but, in an emergency, the site administrator is allowed >>to do it but must inform the affected user(s) as soon as practical. > > As both a system administrator and a user this seems quite >reasonable to me. The only thing I would add is that if a users' data has >been accessed as a result of an emergency situation that the user must be >informed of that access after the emergency has been alleviated or a fixed >time period has passed. (a week or two?). The user should also be informed >what emergency required this action. This would probably even cover >investigating possible "crackers" as that would seem to be an emergency >situation. > > Bill Bogstad And that is exactly the policy that was proposed at VCU, pursuant to faculty concern over the academic computing staff browsing student mail and obvoius text files for purposes of content review. It was vetoed by the AC staff with the explanation that it made it impossible to do their work (must be nice to be able to veto any rule you don't like before it becomes part of a policy!). The "notification" period in this case was 24 hours, which may have been a bit extreme. However, AC objected not on the grounds of 24 hours being too narrow a window, but on the grounds that it was impractical to (1) agree to stay out of user files to begin with and (2) notify affected users each time an emergency access took place. The "browsing" incident had two primary policy- related results: 1. Faculty tried to institute the rule about file access by admins, unsuccessfully. 2. Admins IMMEDIATELY removed read permission from the process accounting file so that in the future, no student would be able to, through careful matching of file access times (via stat) and process accounting file entries (a small C program did the job nicely) determine who had last accessed certain of their files, and what commands they used on them. The process accounting file is unreadable by students to this day. Requests to make it readable have been repeatedly denied. I guess I can see some reasons for wanting a "secret" pacct file, but as far as I'm concerned, it sure doesn't do much for an academic computing dept's reputation to institute that policy immediately after a student used that data to catch dept personnel doing something which met with WIDESPREAD disapproval. (Again, note the differences possible between perception and reality) IMHO, it's this kind of incident which makes students want to be less than open with system administrators. In exchange for being forthright enough to admit to the administrators how the access-tracking had been done so precisely, the students got a read-restricted process accounting files for themselves and the rest of the (uninvolved) university. -- Helen C. O'Boyle | Disclaimer: just a VCU grad student in no isy5hob@cabell.vcu.edu | way speaking for the University ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 23 Jul 91 20:35:08 Message-Id: Organization: Lehman Brothers Fixed Income Division From: shearson.com!newshost!escott@uunet.uu.net References: , <16989@life.ai.mit.edu>, <1991Jul19.181817.5287@murdoch.acc.Virginia.EDU>=W Subject: Re: Administrator Access (Was Re: Ohio State) > From: wjb@cogsci.cog.jhu.edu > As both a system administrator and a user this seems quite >reasonable to me. The only thing I would add is that if a users' data has >been accessed as a result of an emergency situation that the user must be >informed of that access after the emergency has been alleviated or a fixed >time period has passed. (a week or two?). The user should also be informed >what emergency required this action. This would probably even cover >investigating possible "crackers" as that would seem to be an emergency Not entirely. Say you thought a user might be doing something naughty, like keeping a personal copy of some company-owned source code. You take a look at his files, and find that not to be the case. Should you then send him email saying "we thought you might be a dishonest jerk, but we checked it out and decided you aren't one?" Even when I worked in academia this wouldn't have been a popular approach 8^). -- E. Scott Menter, First Vice President Manager, Information Resource Management Group Lehman Brothers escott@shearson.com From kadie Wed Jul 24 04:43:58 1991 To: cafb-mail Subject: Computers and Academic Freedom mailing list (batch edition) Status: RO Computers and Academic Freedom mailing list (batch edition) Wed Jul 24 04:43:41 EDT 1991 In this issue: Steve Romig Message-Id: <9107151544.AA12012@sonofa.cis.ohio-state.edu> Subject: Computers and Academic Freedom (news version) 1.15 [should be 1.16?] [[This is a note by Steve Romig. He posted it over a week ago, but it messed up my program for putting together CAF-batch (CAF-talk was not effected). I think I've fixed (kludged up) the program. So *this* problem should not occur in the future - Carl ]] [Carl Kadie:] >I thank Karl Kleinpaste for posting. Several email notes to me have >said maybe folks at ACS would like to join the debate, but can not. >the debate. Thus, except for (my notes of) the charges against Mr. >Brack, this debate is likely lopsided. I know that the ACS employees have been instructed not to discuss this case on the net. I suspect that this is at least in part due to concern for Mr. Brack's privacy in this affair. [Karl Kleinpaste:] >>I believe that ACS does not have the authority to ban someone from the >>entire university's networks. They are responsible for the health of >>their own systems (hpuxa and magnus, notably), and for the campus >>Proteon ring and its off-campus connections. They are not responsible >>for, and have no authority over, individual departments' machines and >>subnetworks. > [Carl Kadie:] >According to Mr. Brack, ACS did banned him from all university >networks. He says a literal reading of the "agreement" would prohibit >him from using Ohio's computerized library system. I think Mr. Brack >agrees with Mr. Klinepaste that such a ban (would/does) exceeds ACS's >authority. Discussions about the various "charges" seem somewhat moot to me. The rest of us aren't privy to the original copy of those accusations, and so we don't know whether this is a correct representation of what ACS tol Mr. Brack, or whether he has misunderstood or is misrepresenting their statements to him. Not that I'm accusing him of doing so, but I think that we should bear in mind that we have not heard from both sides of the case, and that to make judgements about either Mr. Brack or Ohio State's ACS group at this point would be grossly unfair. [Karl Kleinpaste:] >>4. Dr Dixon also observed, in the 3rd of those 4 sentences, that there >>is "much more to the situation than has been said [in the newsgroups]." >[...] > [Carl Kadie:] >I posted (to the best of my ability) *all* the charges against Mr. >Brack. Dr. Dixon's observation reminds me of something Senator Joseph >McCarthy might have said. ("I have in my pocket a list of known >hackers.") Sigh. Or maybe Dr. Dixon simply (and literally) meant that there was more to the case than had appeared in the newsgroups. He certainly has at least one good reason for NOT making more information known: consideration for Mr. Brack's privacy in this case. McCarthy is a convenient demon to conjure up, but I think the comparison is needless and unfair to Dr. Dixon. It seems to me to be a bit unjust (or at least premature) to make any claims about whether ACS is treating Mr. Brack unjustly or not, since we don't have access to the the rest of the facts (the other side of the story). I doubt that we are likely to get an account of ACS's side at any point. If the University's Judicial Affairs Committee decides against Stephen on any of the charges brought up against him (which are not necessarily the same as the ones that Carl has posted), does that automatically make that an unjust decision? Can we really claim anything like that without access to the rest of the story? That seems to be what some people are saying, and that strikes me as unjust. --- Steve Romig, CIS Department, The Ohio State University ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: Wed, 24 Jul 1991 04:10:12 GMT Message-Id: <1991Jul24.041012.1592@eff.org> Organization: The Electronic Frontier Foundation From: kadie Subject: Ohio State ACS policy [From: Mitchell D Dysart - Carl] Policy on Abuse of Computers and Networks The Office of Academic Computing The Ohio State University Approved June 6, 1990 The use of computers and computer networks in no wat exempts us from the nominal requirements of ethical behavior in the University community. Use of a computer network that is shared by many users imposes certain obligations. In particular, data, software, and computer capacity have value and must be treated accordingly. Legitimate use of a computer or computer network does not extend to whatever we are capable of doing with it. Although some rules are built into the computer's operating system, these restrictions do not limit completely what we can do and see. We are responsible for our actions whether or not the rules are built into the system, and whether or not we can circumvent those rules. The following specific principles of computer and network systems operated under the direction of the Office of Academic Computing are applicable to Ohio State students, faculty, staff, and contract employees. As users we must: o Respect the privacy and rules governing the use of any information accessible through the computer system or network, even when that information is not securely protected. o Respect the ownership of proprietary software. For example, do not make unauthorized copies of such software for your own use, even when that software is not physically protected against copying. o Respect the finite capacity of systems, and limit your own use so as not to interfere unreasonably with the activity of other users. o Respect the procedures established to manage the use of the system. Those who cannot accept these standards of bahavior may be denied access to the relevant computer systems and networks. Violators may also be subject to penalties under the regulations of the University and under laws of the State of Ohio or the United States of America to the extent applicable. I have read the above conditions and agree to abide by these standards. Signature: ________________________________________________ Date: ____________ -- Carl Kadie -- kadie@eff.org or kadie@cs.uiuc.edu -- But I speak for myself. ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: Wed, 24 Jul 1991 04:46:24 GMT Message-Id: <1991Jul24.044624.2161@eff.org> Organization: The Electronic Frontier Foundation From: kadie References: , Subject: Re: Why are there two groups? mcb@presto.ig.com (Michael C. Berch) writes: >I have been reading the CAF material in alt.comp.acad-freedom.news and >alt.comp.acad-freedom.talk since they were newgroup'ed, and while I >enjoy the forum(s) I can't see any difference at all between the >tone/content/subject/etc. of the moderated digest group >alt.comp.acad-freedom.news and the unmoderated discussion group >alt.comp.acad-freedom.talk. Why do we need two groups? -- they're >basically indistinguishable except that one is in digest form (ugh for >most newsreaders) and one is not. CAF-talk (the alt.comp.acad-freedom.talk newsgroup and the comp-academic-freedom-talk mailing list) is an unmoderated open forum. Traffic on CAF-talk sometimes exceeds 100 notes per week. The central rationale for CAF-talk is that unfettered exchanges of opinion will ultimately lead to truth. 134 people subscribe to the CAF-talk (and the related CAF-batch) mailing lists. It is estimated that thousands read CAF-talk via net news. CAF-news (the alt.comp.acad-freedom.news newsgroup and the comp-academic-freedom-news mailing list) is a compilation of the best (in my opinion) notes from CAF-talk. It is published about once a week. In usually contains less than a dozen notes, plus a short introduction written by me. The central rationale for CAF-news is that an unfettered exchanges of ideas can take too long to read. 154 people subscribe to CAF-news. I have seen no estimate of its netnews readership. Five of the 278 mailing list subscribers get both CAF-talk and CAF-news. -- Carl Kadie -- kadie@eff.org or kadie@cs.uiuc.edu -- But I speak for myself. ------------------- Date: Wed, 24 Jul 91 01:49:47 -0400 From: kadie (Carl M. Kadie) Message-Id: <9107240549.AA04802@eff.org> Subject: Re: Freedom of communication [This note did note make it out to all the mailing list readers, so I'm reposting it - Carl] Subject: Re: Freedom of communication Message-Id: <1991Jul17.135620.23433@ux1.cso.uiuc.edu> Organization: University of Illinois at Urbana References: <9107170543.AA25687@eff.org> Date: Wed, 17 Jul 1991 13:56:20 GMT Lines: 27 In article <9107170543.AA25687@eff.org> comp-academic-freedom-talk@eff.org writes: > [....] >Arguments can and have been made here >for using elements of just about every regulatory scheme that humans have >devised to control communication. Until the U.S. Supreme Court speaks with >authority (or until the 27th Amendment to the Constitution proposed by >Professor Tribe at Harvard Law is passed) we will continue to argue. I'm not familiar with Prof. Tribe's proposed amendment. Would someone mind filling me (and several others, I'm sure) in on the details of this? >In my mind, computers bring us much closer to a vital democracy than other >forms of communication. Everyone can say what he or she thinks on computers >and circulate it far and wide. The result is truly a marketplace of ideas. >We should encourage all to join in the discussion. Every communication from >someone should be assumed to carry disclaimers. Yes, yes, yes, and yes! >Dean M. Gottehrer >Anchorage, Alaska > -- Andrew Trapp act31797@uxa.cso.uiuc.edu From kadie Thu Jul 25 09:48:44 1991 To: cafb-mail Subject: Computers and Academic Freedom mailing list (batch edition) Status: RO Computers and Academic Freedom mailing list (batch edition) Thu Jul 25 09:48:22 EDT 1991 In this issue: act31797@uxa.cso.u : Re: Computers and Academic Freedom mailing list (batch ed kadie (Carl M. Kad : Re: Computers and Academic Freedom mailing list (batch ed "Manavendra K. Tha : Re: Computers and Academic Freedom mailing list (batch ed fallout!system (T- : Re: Wayne State Just Ignores Student Rights (was Re: Ohio ROBERT ERVIN JONES : ^^^ desyvax.BITNET!pos : Re: Wayne State Just Ignores Student Rights, CAT-TALK on The addresses for the list are now: comp-academic-freedom-talk@eff.org - for contributions to the list or caf-talk@eff.org listserv@eff.org - for automated additions/deletions (send email with the line "help" for details.) caf-talk-request@eff.org - for administrivia ------------------- Newsgroups: info.academic-freedom Path: uxa.cso.uiuc.edu!act31797 From: act31797@uxa.cso.uiuc.edu (Pogo Possum) Subject: Re: Computers and Academic Freedom mailing list (batch edition) Message-Id: <1991Jul24.195959.27805@ux1.cso.uiuc.edu> Organization: University of Illinois at Urbana References: <9107241913.AA10712@sunburn.ec.usf.edu> Date: Wed, 24 Jul 1991 19:59:59 GMT Lines: 46 In article <9107241913.AA10712@sunburn.ec.usf.edu> comp-academic-freedom-talk@eff.org writes: >In article <910718.22062344.013036@USM.CP6>, ROBERT ERVIN JONES > writes: > >Tribe:> This Constitution's protections for the freedoms of speech, >Tribe:> press, petition, and assembly, and its protections against >Tribe:> unreasonable searches and seizures and the deprivation of >Tribe:> life, liberty, or property without due process of law, shall >Tribe:> be construed as fully applicable without regard to the >Tribe:> technological method or medium through which information >Tribe:> content is generated, stored, altered, transmitted, or >Tribe:> controlled. > >Let's see. The Amendment extends the protections of the First Amendment >(speech, press, petition, and assembly), Fourth Amendment (unreasonable >searches and seizures), and Fifth Amendment (due process) to electronic >communications, or, rather, to any medium of communication "...through >which information content is generated, stored, altered, transmitted, or >controlled..." at all. I don't see what's so extreme about _that_. > Does this mean the FBI will have to get a search warrant (or equivalent) if they wanted to do a wire tap of your phone line? How does "grounds for suspicion" fit into all this? >In any case, the Tribe Amendment is not, I feel, an extreme measure. Agreed. >Moreover, a state of affairs in which the Amendment is felt to be extreme >(this is _not_ intended as a flame to Mr. Jones) is an excellent argument >in favor of its passage. Oh? And suppose some day crime gets so bad that Congress decides to pass an Amendment which repeals rights to due process, etc.? While I don't think that's too likely in the near future, I hope you get the point. (Anyone read about Chicago's Supt. Robert(?) Gates' desire to "suspend" some Consti- tutional rights?) > Mitch Silverman > silverma@sunburn.ec.usf.edu > Student, New College of the University of South Florida > I speak only for myself, and sometimes not even that. -- Andrew Trapp act31797@uxa.cso.uiuc.edu ------------------- Date: Wed, 24 Jul 91 16:55:02 -0400 From: kadie (Carl M. Kadie) Message-Id: <9107242055.AA22189@eff.org> Subject: Re: Computers and Academic Freedom mailing list (batch edition) [I'm reposting this note, because many mailers bounced it the first time -Carl] Subject: Re: Computers and Academic Freedom mailing list (batch edition) Organization: University of Illinois at Urbana References: <9107241913.AA10712@sunburn.ec.usf.edu> Date: Wed, 24 Jul 1991 19:59:59 GMT Lines: 46 In article <9107241913.AA10712@sunburn.ec.usf.edu> comp-academic-freedom-talk@eff.org writes: >In article <910718.22062344.013036@USM.CP6>, ROBERT ERVIN JONES > writes: > >Tribe:> This Constitution's protections for the freedoms of speech, >Tribe:> press, petition, and assembly, and its protections against >Tribe:> unreasonable searches and seizures and the deprivation of >Tribe:> life, liberty, or property without due process of law, shall >Tribe:> be construed as fully applicable without regard to the >Tribe:> technological method or medium through which information >Tribe:> content is generated, stored, altered, transmitted, or >Tribe:> controlled. > >Let's see. The Amendment extends the protections of the First Amendment >(speech, press, petition, and assembly), Fourth Amendment (unreasonable >searches and seizures), and Fifth Amendment (due process) to electronic >communications, or, rather, to any medium of communication "...through >which information content is generated, stored, altered, transmitted, or >controlled..." at all. I don't see what's so extreme about _that_. > Does this mean the FBI will have to get a search warrant (or equivalent) if they wanted to do a wire tap of your phone line? How does "grounds for suspicion" fit into all this? >In any case, the Tribe Amendment is not, I feel, an extreme measure. Agreed. >Moreover, a state of affairs in which the Amendment is felt to be extreme >(this is _not_ intended as a flame to Mr. Jones) is an excellent argument >in favor of its passage. Oh? And suppose some day crime gets so bad that Congress decides to pass an Amendment which repeals rights to due process, etc.? While I don't think that's too likely in the near future, I hope you get the point. (Anyone read about Chicago's Supt. Robert(?) Gates' desire to "suspend" some Consti- tutional rights?) > Mitch Silverman > silverma@sunburn.ec.usf.edu > Student, New College of the University of South Florida > I speak only for myself, and sometimes not even that. -- Andrew Trapp act31797@uxa.cso.uiuc.edu ------------------- Message-Id: <9107242141.AA27051@zerkalo.harvard.edu> Subject: Re: Computers and Academic Freedom mailing list (batch edition) <1991Jul24.195959.27805@ux1.cso.uiuc.edu> Date: Wed, 24 Jul 91 17:41:31 EDT From: "Manavendra K. Thakur" >>>>> On Wed, 24 Jul 1991 19:59:59 GMT, comp-academic-freedom-talk-request@eff.org said: > In article <9107241913.AA10712@sunburn.ec.usf.edu> comp-academic-freedom-talk@eff.org writes: >>Let's see. The Amendment extends the protections of the First Amendment >>(speech, press, petition, and assembly), Fourth Amendment (unreasonable >>searches and seizures), and Fifth Amendment (due process) to electronic >>communications, or, rather, to any medium of communication "...through >>which information content is generated, stored, altered, transmitted, or >>controlled..." at all. I don't see what's so extreme about _that_. >> > Does this mean the FBI will have to get a search warrant (or > equivalent) if they wanted to do a wire tap of your phone line? How does > "grounds for suspicion" fit into all this? They already have to get a warrant to wiretap a phone. Congress outlawed wiretapping when it passed the Communications Act of 1934. With the exception of wiretaps conducted under the guise of "counterintelligence operations" (procedures for which were laid down in the Foreign Intelligence Surveillance Act of 1978), the police, the FBI, and other law enforcement authorities are required to get a proper warrant from a judge or magistrate and must show probable cause to justify the warrant in advance. That is the standard for "grounds of suspicion," as you put it. Of course, different states play different variations of this theme, but usually the well-known standards of "probable cause" or "reasonable suspicion" must come into play. Please look in any introductory textbook on American Constitutional law. It explains all this and much more. >>Moreover, a state of affairs in which the Amendment is felt to be >>extreme (this is _not_ intended as a flame to Mr. Jones) is an >>excellent argument in favor of its passage. > Oh? And suppose some day crime gets so bad that Congress > decides to pass an Amendment which repeals rights to due process, > etc.? While I don't think that's too likely in the near future, I > hope you get the point. (Anyone read about Chicago's Supt. > Robert(?) Gates' desire to "suspend" some Consti- tutional rights?) Congress by itself cannot amend the constitution. Congress has to pass the amendment, and then the states have to ratify the amendment. Yes, you are correct in that any amendment can be repealed or replaced. But the fact still remains that Constitutional amendments are difficult to pass and equally difficult (except perhaps in the case of prohibition) to repeal. In fact, the prohibition amendment is the only Constitutional amendment to be repealed. So yes, while what you hypothesize could happen, it would be very difficult to convince a large number of people ("supermajorities" is a term you often hear) that repealing the 4th amendment is a good idea. And if such a supermajority does come into existence, then it would be within its rights under the Constitution to repeal the 4th amendment if it so wished. I would not stop believing in due process of law if such an event happened, of course. But I hope I've made the clear point that Constitutional rights cannot be suspended unilaterally (except during wartime), and while it is possible for the American electorate to repeal the 4th amendment, it is highly unlikely that they will do so anytime soon. Finally, Mr. Gates is the police chief in Los Angeles, not Chicago (unless there is another Mr. Gates who is chief of police in Chicago). I have not heard of his desire to suspend Constitutional rights, but he announced his plans to retire by April 1992, so I wouldn't worry about him being a threat to Constitutional rights. (His successor and the LAPD as a whole is another matter.) Manavendra K. Thakur Internet: thakur@zerkalo.harvard.edu Systems Programmer, High Energy Division BITNET: thakur@cfa.BITNET Harvard-Smithsonian Center for DECNET: CFA::thakur Astrophysics UUCP: ...!uunet!mit-eddie!thakur ------------------- Received: from GATEWAY by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org) Date: 23 Jul 91 21:18:12 GMT From: fallout!system (T-H-E John Wisniewski?!?) Message-Id: <7967@fallout.uucp> Organization: DECUS DFWLug BBS - Dallas, TX References: <1991Jul17.171651.14481@cs.umb.edu> Subject: Re: Wayne State Just Ignores Student Rights (was Re: Ohio State) In article <1991Jul22.160227.12830@tygra.Michigan.COM>, jp@tygra.Michigan.COM (John Palmer) writes: > In article <1991Jul18.142812.21327@ms.uky.edu> morgan@ms.uky.edu (Wes Morgan) writes: > " > "A brief examination of the current "Student Rights and Responsibilities" > "(which stays in my desk as a reference), reveals a complete description > "of the procedures for implementation *and* appeal of University actions > "against students. > " > "I would think that most Universities make a document such as this > "available to all students, either via surface mail or during the > "student's advising/registration/enrollment procedures. > " > " > > You know, all of the rules and student rights policies and "rights to a > fair hearing" make no difference when the entire chain of command summarily > ignores those rights. > > I know of a case at Wayne State University, in Detroit where that has > happened. > > Students with greivances go first to their department head, then to the > deans office. The student has a RIGHT under the "Student Due Process > Policy" to have a formal hearing and to be able to call witnesses. Those > witnesses, if employees or students of the University, are compelled to > be there. > > In this particular case (involving computer access), the Ombusdman's > office ran into a brick wall at EVERY step of the procedure!! > > * The department head didn't want to hear about it. He said > "go see the Dean". > > * The Dean said she could do nothing and refused to schedule > a hearing. > > * The Vice Provost didn't know what the hell the Ombusdman was > talking about. "Due process policy? Never heard of such a > thing!" > > * The matter was taken to the Board of Governors, since it was > their policy which was being circumvented. It didn't get past > their executive secretary who just referred it back to the > Ombudsman's Office for resolution. > > It seems that at Wayne State University, there is a shadow policy > which goes along with the Due Process Policy. This shadow policy > must be a set of rules outlining how the various departments are > to avoid actually implementing the Due Process Policy. The result: > (last I heard): Litigation will begin in the courts this autumn if > the University fails to respect the student(s) rights after being > given one last chance. > > The moral of the story: BEWARE: It doesn't matter how finely crafted > your "Students Rights and Responsibilities Policy" is: There is > often a conspiracy of "good old boys" who have an unwritten agreement > to "help each other out" and avoid having to answer for their crimes. > In the case of Wayne State University, the corruption runs the entire > chain of command, from the departmental level right on up to the > Board of Governors. > > -- > CAT-TALK Conferencing System | "Buster Bunny is an abused | E-MAIL: > +1 313 343 0800 (USR HST) | child. Trust me - I'm a | jp@Michigan.COM > +1 313 343 2925 (TELEBIT PEP) | professional..." | > ********EIGHT NODES*********** | -- Roger Rabbit | ------------------- Received: from RJONES@USMCP6 by CP-6 MAIL Exporter B02 @USMCP6;24 JUL 91 23:44:3 7 CDT Date: 24 JUL 91 23:44:11 CDT From: ROBERT ERVIN JONES Subject: ^^^ Message-Id: <910724.23441148.019218@USM.CP6> Comments: Please Acknowledge Reception MITCH SILVERMAN AND ALL . . . A chance to elaborate on my earlier phreses ( sp at no acdditional chanrge since I can't back-space and I've been programming all day ) . . . --- Tribe's proposed amendment will be what CyberSpace needs. Yet, in comparisson with the normal frow ( sp -flow ) of legislation and how far those have encompassed before, it is definitely extreme in the amoun t that Tribe brings forth at once. I applausd and desire it. It is great, even if it is a lot at once. but it seems right and necessary. --- I associated Tribe's statement as a 'catcher' due to a du discussion I had with Mitch Kapor and another EFF person on GEnie during an RTC that was ongoing. When questioned about Tribe's proposal, the reply from the EFF was that it was intended to get attention and not be taken literally. --- I would love to see it taken literally, myself. I would also love to see it implemented. In relative reality ( sp upon sp ) . . . it seems that Tribe's amendment will come about solely in piece by piece of other bills that eveolve into laws. Until, eventually, everythin he stated will have come to pass. The sooner the better. --- YEs, to me it is extreme, and all of it necessary. And, from what I had heard from the EFF, they played that it was only to get attention and nothing more. If it becomes more, then that is terrific. --- To the Church of the SubGenius . . . Go with Bob . . . --- CyberSpace - A Virtual Reality --- * aka Frosty ---* | GCMS, SotMESC, DPMA, ACM, CSQ, FP I speak for none . . . Just to be safe | What a great bunch of acronyms ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 25 Jul 91 13:25:32 GMT Message-Id: <9107251136.AA29609@aludra.usc.edu> Organization: Deutsches Elektronen Synchrotron, Experiment ZEUS From: desyvax.BITNET!poser@ucbvax.berkeley.edu References: , <1991Jul22.160227.12830@tygra.Michigan.COM>r Subject: Re: Wayne State Just Ignores Student Rights, CAT-TALK on freedom of expression In article <1991Jul22.160227.12830@tygra.Michigan.COM>, jp@tygra.Michigan.COM (John Palmer) writes in alt.comp.acad-freedom.talk: |> |>In article <1991Jul18.142812.21327@ms.uky.edu> |>morgan@ms.uky.edu (Wes Morgan) writes: |>" [...deleted...] |> |>You know, all of the rules and student rights policies and "rights to a |>fair hearing" make no difference when the entire chain of command summarily |>ignores those rights. Do You do this on purpose? Or is this just rampant hypocrisy? [...Muchly deleted...] Say, aren't You the guy who forged control messages, approvals to moderated groups, cancel messages and made a general stinking nuisance of himself on the net. Say, aren't You the guy who had to change username and domain name at least twice to evade the odious reek of his prolonged sysop I-am-god-on-this-site egotrip and save his business? Say, aren't You the guy who threatens anybody who writes something he objects to with any, some or all of the following in dispicably smarmy litigousness: o His lawyer(s) ? o The FBI ? o The CIA ? o The Secret Service ? Say, aren't You the guy who filters out any message emanating from a certain SF site, effectively censoring the input of all Your downstream sites, for fear that Your customers might hear about Your nefarious doings? Say, aren't You as qualified to talk about freedom of expression, users rights and due process in the computer world as good old Joe Stalin, or J.Edgar? Till Poser poser@desyvax.bitnet Standard Disclaimer Ps.: This is being posted to news.admin, alt.config, alt.flame, alt.comp.acad-freedom.talk, comp.admin.policy, where no doubt it'll be appreciated. From kadie Fri Jul 26 12:00:51 1991 To: cafb-mail Subject: Computers and Academic Freedom mailing list (batch edition) Status: R Computers and Academic Freedom mailing list (batch edition) Fri Jul 26 11:59:00 EDT 1991 In this issue: William Hugh Murra : William Hugh Murra : kadie : Ethics of "Peeking;" requirement to notify subject Sanjay Kapur Subject: Message-Id: <50910725144205/0003158580NA1EM@mcimail.com> Subject: Ethics of "Peeking;" requirement to notify subject >It seems to me that the "popularity" of this approach >(peeking at user i/o or files) >with the systems administration staff is irrelevant >with respect to whether it is ethical behavior >and whether it is or should be legal. Agreed. It is my experience that system administrators, and indeed even system programmers, arrogate unto themselves, or have simply by default, complete logical and physical control over the system. They have it on a set of assumptions including: 1) "someone has to have it" in order to maintain availability; 2) their number is limited; 3) continued good behavior. I do not buy in to numbers 1 or 2. I believe that systems can be configured such that no one must or does have unilateral discretion to do anything he wants. I do not even believe that it is conducive to availability for anyone to have such discretion. I acknowledge that the system administrator sincerely believes that he must have it, but that does not make it so. The occasions on which the system administrator really must look at the content of user input, rather than simply the event, or of a user file, rather than simply the existence and description, is sufficiently rare that it can be normally reserved and granted on an "as needed" or collaborative basis only. Likewise, the population ofsystem administrators is now numbered in the hundreds of thousands. We add more to the population every day than there were in the whole world as recently as two decades ago. Their discretion extends from their own system to any to which they are peer connected and to some to which they should have only a limited connection. There can no longer be a presumption that they all know what they are doing and that they will exercise their discretion with appropriate consideration and restrait. That leaves us with the assumption of continued good behavior. My observation is that most system administrators believe that their control over the system includes the right to exercise it, except as they are explicilty told otherwise. Again, it is my observation, that while most behavior of system administrators is benign, or at least ethically neutral, most are guilty of some abuse of their discretion. Sometimes such abuse is justified in the name of some higher good, but more often it is done without even considering its ethics. The system administrator who suggested that if you peeked, in the name of uncovering a wrong doing, and if you found nothing to justify peeking, then you probably would not want to inform the user that you peeked is a good example of their thinking. The ability to peek includes the right. That one was peeking in the name of "uncovering wrong doing" justifies it. There is no assumption in this analysis that peeking is in and of itself evil and exceptions to that rule cannot be made unilaterally by anyone, no matter how good their intentions are. It does not even occur that the intent of the requirement to inform the user was to deter unwarranted peeking in the first place. People exercising arbitrary power over others often attract resentment, no matter how well they may exercise their power. However, in this case there is more justification for the resentment than the system adminstrators are prepared to recognize. It is no wonder that they are increasingly perceived by their constituents as arrogant, arbitrary, and abusive. Like many of us in other situations, they want to be judged by their rationale rather than by their behavior. William Hugh Murray New Canaan, Connecticut ------------------- Date: Thu, 25 Jul 91 14:41 GMT From: William Hugh Murray <0003158580@mcimail.com> Subject: Message-Id: <93910725144139/0003158580NA1EM@mcimail.com> Subject: Ethics of "Peeking;" requirement to notify subject >Not entirely. Say you thought a user might be doing something naughty, like >keeping a personal copy of some company-owned source code. You take a look at >his files, and find that not to be the case. Say you did that. Did you have probable cause? Did you have a warrant, i.e., concurrence from a higher authority that you that had probable cause? If not, you are on very thin ethical ice, whether or not you subsequently inform the user that you looked. The following analysis may be helpful. The original hypothetical, to which this one is offered in response, was posed in an academic setting. This one is posed by the administrator of a commercial system. Let us look at one of each. The ethics of the situation depend, in part, upon the understanding and agreement between the parties. The academy has always pretended that it stands in loco parentis. That is, its relationship to the student is one of parent to child, rather than one of peers agreeing to exchange a service for a fee. Under this assumption, or presumption if you prefer, the school is responsible for the ethical indoctrination of the student and has an inherent right to invade or limit his privacy in that interest. Of course, even under this assumption, the school would not normally convey full authority to act in this manner to all of its minions, to include system administrators. I doubt that many system administrators operate under the belief that they are responsible for the ethical training of users. In a commercial setting, the assumption is one of agreement between peers. the ethics of the situation would depend upon the agreement. What did each promise? What demonstrations of fulfillment were agreed to. What remedies for breach were provided? For example, let us take a large computer manufacturer, often associated with the color blue, but, for sake of this use, need not be oherwise identified. Blue tells its employees that it is its intent to respect the rights of program authors, and abide by all of its contracts. It tells them that it is a condition of continued employment that all of its employees cooperate in this intent. It goes on to tell them that access to such resources as desks, phones, and computers is provided to help them do their jobs and restricted to management approved uses. While it gives, its managers a great deal of latitude in deciding what is to be approved, it does not permit them to approve exceptions to the first two rules. Further it tells its employees that its desks and computers are its own property, that it reserves the right to look in them, and that employees put personal things in them at the risk that they will be seen by management. Now Blue does not really intend to look; they say what they say in part to protect themselves in the event that one of their agents does look. However, it does reserve the right to do so. Thus it would be ethical for Blue, as a corporate person, to look, but probably not ethical for any of its agents, except as an explict part of his job, to do so. In both cases we end up with a user who is not entitled to an expectation of privacy, and a system adminitrator who is not entitled, except in very limited and explicit circumstances, including probable cause, to peek. Now take no comfort in any of this. It is a comparative anyalysis of two hypotheticals. It is a guide to ethical analysis, not to ethical action. I do not pretend that either hypothesis does or ethically should correspond to the real world. For example, I do not pretend to know whether or not a university is an agent of the parent or a vendor of a service to the student. William Hugh Murray New Canaan, Connecticut ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: Thu, 25 Jul 1991 15:26:14 GMT Message-Id: <1991Jul25.152614.11476@eff.org> Organization: The Electronic Frontier Foundation From: kadie References: , <50910725144205.0003158580NA1EM@mcimail.com> Subject: Ethics of "Peeking;" requirement to notify subject Here is what the Joint Statement says about searches: [From AAUP Policy Documents and Reports, 1977 Edition] Joint Statement on Rights and Freedoms of Students [...] B. Investigation of Student Conduct 1. Except under extreme emergency circumstances, premises occupied by students and the personal possessions of students should not be searched unless appropriate authorization has been obtained. For premises such as residence halls controlled by the institution, an appropriate and responsible authority should be designated to whom application should be made before a search is conducted. The application should specify the reasons for he search and the objects or information sought. The student should be present, if possible, during the search. For premises not controlled by the institution, the ordinary requirements for lawful search should be followed. [...] -- Carl Kadie -- kadie@eff.org or kadie@cs.uiuc.edu I do not represent EFF; this is just me. ------------------- Date: Thu, 25 Jul 1991 11:30 EDT From: Sanjay Kapur Subject: peeking Message-Id: X-Organization: State University of New York, Stony Brook X-Vms-Cc: SKAPUR >Sender: William Hugh Murray <0003158580@mcimail.com> > >Agreed. It is my experience that system administrators, and indeed >even system programmers, arrogate unto themselves, or have simply by >default, complete logical and physical control over the system. They >have it on a set of assumptions including: 1) "someone has to have it" in >order to maintain availability; 2) their number is limited; 3) continued good >behavior. > >I do not buy in to numbers 1 or 2. I believe that systems can be configured >such that no one must or does have unilateral discretion to do anything he >wants. In a few years maybe. Current operating systems do not have as much flexibility as computer salesbeings will have you assume. > >People exercising arbitrary power over others often attract resentment, >no matter how well they may exercise their power. However, in this case >there is more justification for the resentment than the system >adminstrators are prepared to recognize. It is no wonder that they are >increasingly perceived by their constituents as arrogant, arbitrary, and >abusive. Like many of us in other situations, they want to be judged by >their rationale rather than by their behavior. I have been using computers for about twenty years now. Systems Administrators were much more arrogant and arbitrary then compared to now. The way Computing is organized in many places, the administration does not want to be bothered with computer discipline or anything connected with computers. That is why they appoint systems administrators who will take care of problems as the systems administrator sees fit. This is never written policy or even spoken policy. No (non-computer) administrator will admit to such an abdication of power to the systems administrator but that is how it is in reality. As far as the "powers that be" are concerned, systems administrators normally do an excellent job of keeping trouble away and so they are given whatever powers they need to carry out their jobs. This again is unspoken and unwritten but very real policy. One major disadvantage to systems administrators of such policy is that when the "shit hits the fan", they are convenient scapegoats since they were never officially given the power to do what was expected of them. Since there are "hundreds of thousands" of systems administrators out there, a new one can be hired without problems. > >William Hugh Murray >New Canaan, Connecticut Sanjay Kapur |Internet: Sanjay.Kapur@sunysb.edu Systems Staff, Computing Services, |Bitnet: SKAPUR@USB State University of New York, |SPAN/HEPnet: 44132::SKAPUR Stony Brook, NY 11794-2400 |Phone:(516)632-8029, FAX:(516)632-8046 ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: Thu, 25 Jul 1991 15:36:49 GMT Message-Id: <1991Jul25.153649.11765@eff.org> Organization: The Electronic Frontier Foundation From: kadie References: , <50910725144205.0003158580NA1EM@mcimail.com> Subject: Ethics of "Peeking;" requirement to notify subject Here are the University of Illinois' and the U.S. Constitution's rules for searches: {I think University rules concerning assigned office space provide the best model of how disk space and e-mail should be treated. - Carl} "IV. Privacy A. Members of the University community have the same rights of privacy as other citizens and surrender none of those rights by becoming members of the academic community. These rights of privacy extend to residence hall living. Nothing in University regulations or contracts shall give University officials authority to consent to a search by police or other government officials of offices assigned or living quarters leased to individuals except in response to a properly executed search warrant or search incident to an arrest. B. When the University seeks access to an office assigned or living quarters leased to an individual to determine compliance with provisions of applicable multiple-dwelling unit laws, ordinances, and regulations, or for improvement or repairs, the occupant shall be notified of such action not less that twenty-four hours in advance. There may be entry without notice in emergencies where imminent danger to life, safety, health, or property is reasonably feared and for custodial service. C. The University may not conduct or permit a search of an office assigned or living quarters leased to an individual except in response to a properly executed search warrant or search incident to an arrest." {The 4th Amendment:} "The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized." {A government institution, such as this University can not ignore these protections just because it owns the facilities [Mancusi v. DeForte 392 U.S. 364, 368 (1967); Gillard v. Schmidt 579 F.2d 825, 829 (3d Cir. 1978)] - Carl} -- Carl Kadie -- kadie@eff.org or kadie@cs.uiuc.edu I do not represent EFF; this is just me. ------------------- Date: Thu, 25 Jul 91 10:51:58 -0500 From: "Carl M. Kadie" Message-Id: <9107251551.AA14954@m.cs.uiuc.edu> Subject: FYI: Re: Ohio State (who does a new law prof see for net Path: m.cs.uiuc.edu!wupost!zaphod.mps.ohio-state.edu!cis.ohio-state.edu!pacific.mps.ohio-state.edu!verber From: verber@pacific.mps.ohio-state.edu (Mark Verber) Newsgroups: comp.admin.policy Subject: Re: Ohio State (who does a new law prof see for net access?) Message-ID: Date: 25 Jul 91 15:04:11 GMT References: <1991Jul11.145817.9405@eff.org> <1991Jul11.153712.9886@eff.org> <16945@life.ai.mit.edu> <1991Jul15.141516.20768@eng.umd.edu> <1991Jul15.203851.7073@visix.com> <26125@well.sf.ca.us> Organization: Ohio State University; Physics Department Lines: 74 In-reply-to: hank@well.sf.ca.us's message of 16 Jul 91 03:25:21 GMT People... I am getting really tired of the thread about "Ohio State" policies. First of all, that title is misleading because it is not Ohio State policies, but the policies of the computer center (ACS). Secondly the student in question certainly given a biases accounting, and the staff at ACS aren't permited to get their biases (but balancing perspective), so everyone is shooting in the dark. If you want to continue this thread why don't you start talking about the abstract issues, because that is what you are doing right now. You are just pretending the issues you are concerned about are being played out at OSU. The "facts" in this case that people have been throwing around are more like opinions and impressions. Third, while I have done more that my share of battling the what was the "evil empire's" crazy policies, but I have found the ACS originization at OSU to be getting more and more reasonable. I don't like seeing ACS' name getting dragged through the mud when it is clear that they are trying very hard to cope with a lot of changes and improve the services that they are delivering to our campus. I am in general a hater of bureaucracy. But in the 13 years I have been around OSU I have come to appreciate grudgingly the way things work. OSU does have an ombudsman. While not perfect, I have seen the ombudsman get action. I have even seem tenured profs getting the axe from proceedings that were started by the ombudsman. Many, many years ago I was banned by IRCC (what ACS used to be called). While they over-reacted, the bureaucracy (a mandatory meeting with my chairman) cooled them out. I was banned for an indeterminant period of time. Later, I not only got my account back, but 'wheel' privs (it was a -20) when it was clear that I had learned my lesson and I was in need of an account for work. Not that the IRCC people from the first conflict were happy with me getting an account, but they did install it. They follow the rules religiously. > Seeing all the OSU discussion encourages me to inquire, for an old > friend who's a new teacher at OSU's law school, and wants net access > (and relevant handholding). Sounds like the school's got a lot of > systems -- who should she inquire of? Local phone number/name there? The system that Steven Brack was removed from (magnus) sole purpose in life is for students and staff to read and send electronic mail and news. Anyone can get a free account provided they are associated with the university, and agree to the policies for the machines. Your friend could walk over to the ACS service desk, show them his staff id, and get an account and their getting-started guide. BTW: This is one of the reasons that the policies on magnus are so restrictive. If everyone on campus requested an account as they are permitted, there would be 60,000 acounts. Right now they have a mere 3114 accounts. ACS has limited resources. They have to be "fair", eg they can't give better service to any particular group for individual for fear of someone crying "foul", so they offer the best service they think they can afford to give to everyone. The result is what seems to most of us to be overly restrictive. Finally, I would like to second Amanda Walker's resentment of: > what seems to be a common characterization of sysadmins as > self-serving tools of "the administration." When I worked for OSU > CIS, I and the rest of the staff spent a lot of time and effort > defending our users from the onslaught of stupid bureaucracy. Many of the privileges we all enjoy right now we have because sysadm and system staff fought for those privileges. Relatively free mail, news, and Internet access at OSU were initially driven by the system staff at OSU/CIS. If it weren't for serious elisp kill algorithm for GNUS I wouldn't bother reading this news group. To much noise, not enough substantive discussion. Disgusted, Mark ------------------- Date: Thu, 25 Jul 1991 11:56 EDT From: Sanjay Kapur Subject: security and peeking. Message-Id: X-Organization: State University of New York, Stony Brook X-Vms-Cc: SKAPUR >Sender: William Hugh Murray <0003158580@mcimail.com> > >Say you did that. Did you have probable cause? Did you have a warrant, i.e., >concurrence from a higher authority that you that had probable cause? If not, >you are on very thin ethical ice, whether or not you subsequently inform the >user that you looked. The question should be of security and not ethics. Ethics are part of religion and so everyone has a right to what ethical beliefs they follow. What are the ethics of the situation when a security officer at a high school opens a student's locker looking for stolen property? The security officer does not need a warrant, probable cause or anything. A computer account is very much like a high school locker. The insides belong to the student and the physical structure belongs to the school. There is an individualized lock/password on each locker. Lockers/computer accounts are given free of charge to students. A student can stuff only so much in his locker/disk space before the space/diskquota runs out. Breaking into another student's locker is frowned upon. Some of the discussion on the network sometimes takes on the language of the locker room :-). If you store dead fish in a locker and it smells, everyone gets upset at you. However there are a few major differences. A locker can not use up more than its fair share of resources (floor space) and can not print up ten thousand sheets of paper. A locker can not be used to break into another locker ( except adjacent lockers). Analogies and hypothetical situations can be extended ad absurdum. >and has an inherent right to invade or limit his privacy in that >interest. Of course, even under this assumption, the school would not >normally convey full authority to act in this manner to all of its >minions, to include system administrators. I doubt that many system >administrators operate under the belief that they are responsible for >the ethical training of users. But they are interested in securing the system and keeping its availabilty high for ALL users. >does look. However, it does reserve the right to do so. Thus it would >be ethical for Blue, as a corporate person, to look, but probably not >ethical for any of its agents, except as an explict part of his job, to >do so. That depends on the company. A high security company or a company plagued with employee theft may frisk everyone leaving the building and still be ethical. > >In both cases we end up with a user who is not entitled to an >expectation of privacy, and a system adminitrator who is not entitled, >except in very limited and explicit circumstances, including probable >cause, to peek. > Yes, in your very hypothetical scenario. Real life is not that simple. >Now take no comfort in any of this. It is a comparative anyalysis of >two hypotheticals. It is a guide to ethical analysis, not to >ethical action. I do not pretend that either hypothesis does or >ethically should correspond to the real world. For example, I do not >pretend to know whether or not a university is an agent of the parent or >a vendor of a service to the student. I agree, Ethicists love to extremely oversimplify real life conflicts. > >William Hugh Murray >New Canaan, Connecticut Sanjay Kapur |Internet: Sanjay.Kapur@sunysb.edu Systems Staff, Computing Services, |Bitnet: SKAPUR@USB State University of New York, |SPAN/HEPnet: 44132::SKAPUR Stony Brook, NY 11794-2400 |Phone:(516)632-8029, FAX:(516)632-8046 ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 25 Jul 91 17:40:30 GMT Message-Id: <1991Jul25.174030.12966@midway.uchicago.edu> Organization: University of Chicago From: zaphod.mps.ohio-state.edu!uwm.edu!ux1.cso.uiuc.edu!midway!ellis.uchicago.edu!swsh@uunet.uu.net References: , <1991Jul24.195959.27805@ux1.cso.uiuc.edu>, <9107242141.AA27051@zerkalo.harvard.edu>hica Subject: Chicago's Supt. of Police (was Re: Computers and Academic Freedom mailing list (batch edition)) In article <9107242141.AA27051@zerkalo.harvard.edu> thakur@zerkalo.harvard.edu (Manavendra K. Thakur) quotes somebody, whose reference I've lost: [much deleted] >> Oh? And suppose some day crime gets so bad that Congress >> decides to pass an Amendment which repeals rights to due process, >> etc.? While I don't think that's too likely in the near future, I >> hope you get the point. (Anyone read about Chicago's Supt. >> Robert(?) Gates' desire to "suspend" some Consti- tutional rights?) [much deleted, including points about how Congress alone can't change the Constitution] >Finally, Mr. Gates is the police chief in Los Angeles, not Chicago >(unless there is another Mr. Gates who is chief of police in Chicago). >I have not heard of his desire to suspend Constitutional rights, but >he announced his plans to retire by April 1992, so I wouldn't worry >about him being a threat to Constitutional rights. (His successor and >the LAPD as a whole is another matter.) The Superintendent of Police in Chicago is named Leroy Martin. He recently returned from a trip to China, and expressed his admiration for their law enforcement and prison policies, and a desire to do away with some civil rights (due process, and protection from search and seizure) in order to emulate them. There has been hardly any public outcry about his statements. (Is it ironic to hear such things from a black man in a heavily segregated city, or is my irony meter out of whack?) -- Janet Swisher Internet: swsh@midway.uchicago.edu University of Chicago Phone: (312) 702-7608 Academic and Public Computing P-mail: 1155 E. 60th St. Chicago IL 60637, USA ------------------- From: William W. Arnold Message-Id: <9107252042.AA23906@cabell.vcu.edu> Subject: Re: security and peeking. Date: Thu, 25 Jul 91 16:42:36 EDT X-Mailer: ELM [version 2.3 PL11] I would like to dispute your analogy. Sanjay.Kapur@sunysp.edu writes --- > >What are the ethics of the situation when a security officer at a high school >opens a student's locker looking for stolen property? The security officer >does not need a warrant, probable cause or anything. > >A computer account is very much like a high school locker. The insides belong >to the student and the physical structure belongs to the school. There is an >individualized lock/password on each locker. Lockers/computer accounts are >given free of charge to students. A student can stuff only so much in his >locker/disk space before the space/diskquota runs out. Breaking into another >student's locker is frowned upon. Some of the discussion on the network >sometimes takes on the language of the locker room :-). If you store dead >fish in a locker and it smells, everyone gets upset at you. > I would like to suggest that the correct analogy is to either a college locker, or to a grad-students desk. In so happens that in both these cases the school is required to have a search warrent except in case of "imminent danger to life ...." In the case of the desk this is specificaly mentioned in the VCU policy and procedures manual. In the case of the locker, on at least one occasion a security guard here was yelled at for going into a student's locker without a warrent. >Analogies and hypothetical situations can be extended ad absurdum. very true! >Sanjay Kapur |Internet: Sanjay.Kapur@sunysb.edu /------------------------------\ /----------------------------------\ | William W. Arnold | Is the universe an accident, | | has8wwa@cabell.vcu.edu | a mistake, or did someone | | warnold@gnu.ai.mit.edu | do it to us on purpose? | | someone.else@someplace.else | --ME-- | \------------------------------/ \----------------------------------/ ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: Thu, 25 Jul 1991 20:37:49 GMT Message-Id: <1991Jul25.203749.15750@eff.org> Organization: The Electronic Frontier Foundation From: kadie Subject: Help Wanted Help Wanted - Mailing List Manager/Assistant Editor In an effort to give me more time to work on my thesis, I'd like recruit someone to help me with the Computers and Academic Freedom lists. (Also, I think that delegation of work/authority is generally a good thing.) * Exact Responsiblities are Open. Here is what I do now: Manage the mailing list Type the command to send out CAF-batch about once a day Debug/work around the mailing programs (mostly shell scripts) Promote the CAF mailing lists Answer email as politely as I can Select the best notes from CAF-talk for CAF-news * The Ideal Candidate would have enthusiasm for the project be a student or other academic have good network connections be able to program shell scripts * Compensation Satifaction of advancing a worthy cause The fame/infamy of being a net.personality You may also be able to get an account on the eff.org machine If you are interested, please send email to kadie@eff.org - Carl -- Carl Kadie -- kadie@eff.org or kadie@cs.uiuc.edu I do not represent EFF; this is just me. ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 25 Jul 91 20:14:52 GMT Message-Id: <1991Jul25.201452.836@zorch.SF-Bay.ORG> Organization: SF-Bay Public-Access Unix From: elroy.jpl.nasa.gov!swrinde!mips!pacbell.com!tandem!zorch!xanthian@uunet.uu.net References <6620@gazette.bcm.tmc.edu>, <23.Jul.91.155137.81@cogsci.cog.jhu.edu>, =] Subject: Re: Administrator Access (Was Re: Ohio State) escott@clippers.shearson.com (E. Scott Menter) writes: > wjb@cogsci.cog.jhu.edu writes: >> As both a system administrator and a user this >> seems quite reasonable to me. The only thing I >> would add is that if a users' data has been >> accessed as a result of an emergency situation >> that the user must be informed of that access >> after the emergency has been alleviated or a >> fixed time period has passed. (a week or two?). >> The user should also be informed what emergency >> required this action. This would probably even >> cover investigating possible "crackers" as that >> would seem to be an emergency > Not entirely. Say you thought a user might be > doing something naughty, like keeping a personal > copy of some company-owned source code. You take a > look at his files, and find that not to be the > case. Should you then send him email saying "we > thought you might be a dishonest jerk, but we > checked it out and decided you aren't one?" > Even when I worked in academia this wouldn't have > been a popular approach 8^). And for good reason; that is not an _emergency_, that is a "show probable cause" type of situation, and at the least, the person's account should be frozen or a protected copy of the file made, and a procedure gone through in which evidence supporting admin access to that file's insides is presented, subject to owner's rebuttal, and adjudicated by higher authority before the file is browsed by other than its owner. Kent, the man from xanth. ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 25 Jul 91 20:45:44 GMT Message-Id: <1991Jul25.204544.1555@zorch.SF-Bay.ORG> Organization: SF-Bay Public-Access Unix From: spool.mu.edu!mips!pacbell.com!tandem!zorch!xanthian@uunet.uu.net References <1991Jul17.233857.27897@mailer.cc.fsu.edu>, <1991Jul18.152242.18998@eng.umd.edu>, <1991Jul18.221720.24347@mailer.cc.fsu.edu> Subject: Re: conflict resolution was Re: Ohio State With that much evidence, I'd have gone right to the media; nothing like a little op-ed page or sixty second local news spot consisting entirely of a description of the derelection of duty at all levels of command to regain the attention of authorities. Whatever passes for an alumni association could have been valuable friends, too, since the hands that hold the purse strings seem to wield an inordinate amount of power, and mostly be ex-students who've been given that runaround themselves. Kent, the man from xanth. ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 25 Jul 91 20:37:16 GMT Message-Id: <1991Jul25.203716.1274@zorch.SF-Bay.ORG> Organization: SF-Bay Public-Access Unix From: spool.mu.edu!mips!pacbell.com!tandem!zorch!xanthian@uunet.uu.net References <1991Jul17.233857.27897@mailer.cc.fsu.edu>, <1991Jul18.142812.21327@ms.uky.edu>, <1991Jul22.160227.12830@tygra.Michigan.COM> Subject: John P. Palmer rides again! jp@tygra.Michigan.COM (John Palmer) writes: > The moral of the story: BEWARE: ... There is often > a conspiracy ... to ... avoid having to answer for > their crimes. Much similar to ddmi.com (aka tygra.com, aka michigan.com, aka cat-talk), having to censor outside exposures of its sysadmin's pecadillos, so his site won't have to answer to its subscribers for his crimes against USENet? > In the case of Wayne State University, the > corruption runs the entire chain of command, from > the departmental level right on up to the Board of > Governors. Much like the corruption at ddmi.com runs from the president chief stockholder and sysadmin, right down through the ranks? [Many thanks for putting my site on your "drop news from this site on the floor" list, John; it is _so_ nice to be able to warn people about you right "in front of your eyes" and have you helpless to answer, or even to see what information they have that you don't know they're getting. Losing cat-talk's subscribers as an audience when you've lyingly claimed to give them a full USENet feed is a sad small penalty to pay in exchange. They are the innocent victims of your ongoing net misbehavior, and your frantic attempts to cover it up or deny it ever happened.] Kent, the man from xanth. ------------------- From: William W. Arnold Message-Id: <9107252245.AA03474@cabell.vcu.edu> Subject: Re: in loco parantis Date: Thu, 25 Jul 91 18:45:01 EDT X-Mailer: ELM [version 2.3 PL11] comp-academic-freedom-talk-request@eff.org writes --- > The academy has always pretended that it stands in loco parentis. > while this may have been true in the past, My understanding is that this in no longer true, and hasen't been true for many years. if it is, I find the idea offensive, and so would the the 50 year old college student sitting across from me. > William Hugh Murray > New Canaan, Connecticut > /------------------------------\ /----------------------------------\ | William W. Arnold | Is the universe an accident, | | has8wwa@cabell.vcu.edu | a mistake, or did someone | | warnold@gnu.ai.mit.edu | do it to us on purpose? | | someone.else@someplace.else | --ME-- | \------------------------------/ \----------------------------------/ ------------------- Date: Thu, 25 Jul 91 22:32 GMT From: William Hugh Murray <0003158580@mcimail.com> Subject: Message-Id: <12910725223221/0003158580NA4EM@mcimail.com> Amanda Walker submits: >And to answer some of Mr. Murray's rhetorical questions, I will submit >that yes, "anything not explicitly illegal must be tolerated," as long >as it causes no one harm (and I do not classify insult or offense as >"harm"). Yes, you may engage in rude or outrageous behavior simply to >demonstrate how free you are. And yes, I hold freedom to be an ultimate >value. Not an easy one, but one nonetheless. Well, there is toleration and toleration, tolerators and tolerators. I agree that the state must tolerate anything that is not illegal. I further agree that, under our Constitution, there are limits to what the state may make illegal. The limits were placed in the Constitution to prevent the government from using the power of the state to perpetuate itself. [I am confident that Ms. Walker understands this distinction; however I am not so sure that she grants it.] Now that leaves the remainder of behavior and the rest of us. Let us begin with me. There is a great deal of rude and outrageous, but otherwise legal, behavior that I am prohibited from engaging in. First, I may not engage in behavior, which if engaged in by everyone, would be damaging to public order or public trust, invite the otherwise unjustified intervention of arbitrary authority, or interfere with the enjoyment of other things which I, or the community, value. [I note Ms. Walker's qualification: "as long as it causes no harm." I would like to hope that qualification is big enough to embrace some of these examples.] The origin of this prohibition is my perception of my obligation to the rest of the community. The authority for the prohibition is my own well-formed conscience. Second, I may not engage in behavior that would reflect discredit on my profession. The origin of this prohibition is the cannon of ethics of my profession. The authority for the prohibition is a non-enforceable agreement that I consented to when I joined the profession. This agreement is between me and my professional peers and colleagues. Among other things, I agree not to embarass them in return for which they agree not to embarass me. For the same reason, I may not hire or sponsor for professional advancement anyone who is not professionally competent or who cannot be relied upon to abide by the professional ethics. Perfectly legal, but I may not do it. There are some sanctions available to my colleagues if do not meet my obligation. That is, they are not forced to tolerate my behavior simply because it is legal. They may not prevent me in advance, but they can sanction me after the fact. Incidentally, refusing to sponsor someone for professional advancement is a form of non-toleration. Note that there are circumstances under which, not only may I elect not to, but have a positive obligation not to tolerate some classes of perfectly legal actions. [Perhaps Ms. Walker has undertaken no such obligations; perhaps I remind her of some that she has overlooked. Perhaps she only engaged in hyperbole or posturing.] Third, I may not engage in behavior which is embarassing to my business associates or colleagues. I hope that those of you who have not yet learned the origin, authority, and sanctions for this behavior learn it without too much permanent damage. On a different plane, I may not speak in a manner which I calculate to be damaging to the delicate emerging persona of a child. The source of this prohibition is my perception that the child is God's handiwork, that She has difficulty enough making the child come out the way that She would like, and that while She may tolerate my interference in the short run, in the long run, I suspect that She may maintain a special place in hell for people who do violence to children. I may not interfere with the intended operation of a computer, release, or even write a computer virus, play with fire, or otherwise experiment with things beyond my ken or control. [Oh, Ms. Walker there are all kinds of limits on my freedom short of law, far too many to enumerate here. Let these few serve as examples.] None of this is to say that there are not causes in which I will take up rude, extreme, or outrageous behavior. I hope that none of them are so trivial as merely demonstrating that I can get away with it. William Hugh Murray New Canaan, Connecticut ------------------- Newsgroups: info.academic-freedom Path: uxa.cso.uiuc.edu!act31797 From: act31797@uxa.cso.uiuc.edu (Pogo Possum ) Subject: Re: Computers and Academic Freedom mailing list (batch edition) <1991Jul24.195959.27805@ux1.cso.uiuc.edu> Message-Id: <1991Jul25.234720.25358@ux1.cso.uiuc.edu> Organization: University of Illinois at Urbana References: <9107242141.AA27051@zerkalo.harvard.edu> Date: Thu, 25 Jul 1991 23:47:20 GMT Lines: 40 In article <9107242141.AA27051@zerkalo.harvard.edu> comp-academic-freedom-talk@eff.org writes: >>>>>> On Wed, 24 Jul 1991 19:59:59 GMT, comp-academic-freedom-talk-request@eff.org said: > >> In article <9107241913.AA10712@sunburn.ec.usf.edu> comp-academic-freedom-talk@eff.org writes: >> Oh? And suppose some day crime gets so bad that Congress >> decides to pass an Amendment which repeals rights to due process, >> etc.? While I don't think that's too likely in the near future, I >> hope you get the point. (Anyone read about Chicago's Supt. >> Robert(?) Gates' desire to "suspend" some Constitutional rights?) > >Congress by itself cannot amend the constitution. Congress has to >pass the amendment, and then the states have to ratify the amendment. > [....] > >Finally, Mr. Gates is the police chief in Los Angeles, not Chicago >(unless there is another Mr. Gates who is chief of police in Chicago). >I have not heard of his desire to suspend Constitutional rights, but >he announced his plans to retire by April 1992, so I wouldn't worry >about him being a threat to Constitutional rights. (His successor and >the LAPD as a whole is another matter.) > Mea culpa...There IS a Gates in Chicago, but his name isn't Robert. I not only screwed up the first name but the last as well. The correct name is LeRoy Martin. He had just returned from China and had been mightily impressed by the way they handle crime over there. Anyways, my point was that under certain unfavorable conditions (e.g. high crime) the "super- majority" can be "persuaded" to give up their rights. For those interested in the story, check the July 12 Chicago Tribune (likely available at a good public library :-). >Manavendra K. Thakur Internet: thakur@zerkalo.harvard.edu >Systems Programmer, High Energy Division BITNET: thakur@cfa.BITNET >Harvard-Smithsonian Center for DECNET: CFA::thakur >Astrophysics UUCP: ...!uunet!mit-eddie!thakur > -- Andrew Trapp act31797@uxa.cso.uiuc.edu ------------------- Date: Thu, 25 Jul 1991 20:20 EDT From: Sanjay Kapur Subject: OS limitations. Message-Id: <45789325DCA06C5D@ccmail.sunysb.edu> X-Organization: State University of New York, Stony Brook X-Vms-Cc: SKAPUR > >And for good reason; that is not an _emergency_, >that is a "show probable cause" type of situation, >and at the least, the person's account should be >frozen or a protected copy of the file made, and a >procedure gone through in which evidence supporting >admin access to that file's insides is presented, >subject to owner's rebuttal, and adjudicated by >higher authority before the file is browsed by other >than its owner. > >Kent, the man from xanth. > A sufficently privileged person can browse a file without any trace whatsoever in almost all the general purpose operating systems in use today. This is the nightmare that makes Systems Administrators paranoid about crackers. Any policy requiring systems administrators to get permission to browse is totally unenforceable because the system administrator can browse without any trace or proof of such browsing. Any user or policy maker who assumes otherwise is living in fantasyland (or is it Xanth?) An unenforceable policy is bad policy as it devalues all other policies. Sanjay Kapur |Internet: Sanjay.Kapur@sunysb.edu Systems Staff, Computing Services, |Bitnet: SKAPUR@USB State University of New York, |SPAN/HEPnet: 44132::SKAPUR Stony Brook, NY 11794-2400 |Phone:(516)632-8029, FAX:(516)632-8046 ------------------- From: William W. Arnold Message-Id: <9107260112.AA11221@cabell.vcu.edu> Subject: Re: OS limitations. Date: Thu, 25 Jul 91 21:12:56 EDT X-Mailer: ELM [version 2.3 PL11] Sanjay.Kapur@susysb.edu writes --- >Any policy requiring systems administrators to get permission to browse >is totally unenforceable because the system administrator can browse >without any trace or proof of such browsing. Any user or policy maker >who assumes otherwise is living in fantasyland (or is it Xanth?) > If you can not trust your system admins to obey the rules that have been established, they you have problems that go beyond what can be reasonably solved here. The current problem is that there are no clear rules against this sort of thing, or, if you are on the other side of the argument, there is no clear permision granted to do this. >An unenforceable policy is bad policy as it devalues all other policies. > > Sanjay Kapur |Internet: Sanjay.Kapur@sunysb.edu Any policy is unenforcable, if the people who are hired to enforce it are the ones violating it. /------------------------------\ /----------------------------------\ | William W. Arnold | Is the universe an accident, | | has8wwa@cabell.vcu.edu | a mistake, or did someone | | warnold@gnu.ai.mit.edu | do it to us on purpose? | | someone.else@someplace.else | --ME-- | \------------------------------/ \----------------------------------/ ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 26 Jul 91 01:03:16 GMT Message-Id: <1991Jul26.010316.19498@NCoast.ORG> Organization: North Coast Public Access *NIX, Cleveland, OH From: europa.asd.contel.com!gatech!usenet.ins.cwru.edu!ncoast!jpp@uunet.uu.net References <1991Jul18.142812.21327@ms.uky.edu>, <1991Jul22.160227.12830@tygra.Michigan.COM>, <7967@fallout.uucp> Subject: Re: Wayne State Just Ignores Student Rights (was Re: Ohio State) In article <7967@fallout.uucp> system@fallout.uucp (T-H-E John Wisniewski?!?) writes: " " [A duplicate of my original article] " Did you mean to say something, John?? All that came across was a duplication of my original article, without any text of your own. John ------------------- Date: Fri, 26 Jul 91 04:37:16 EDT From: Mitchell Silverman (SARASOTA) Message-Id: <9107260837.AA12303@sunburn.ec.usf.edu> Subject: Re: Computers and Academic Freedom mailing list (batch edition) In Computers and Academic Freedom mailing list (batch edition) Thu Jul 25 09:48:22 EDT 1991 <9107251348.AA09917@eff.org>, his message-id <910724.23441148.019218@USM.CP6>, ROBERT ERVIN JONES writes: > MITCH SILVERMAN AND ALL . . . A chance to elaborate on > my earlier phreses ( sp at no acdditional chanrge since I > can't back-space and I've been programming all day ) . . . > --- > Tribe's proposed amendment will be what CyberSpace needs. > Yet, in comparisson with the normal frow ( sp -flow ) of > legislation and how far those have encompassed before, it > is definitely extreme in the amoun t that Tribe brings forth > at once. I applausd and desire it. It is great, even if it > is a lot at once. but it seems right and necessary. > --- > I associated Tribe's statement as a 'catcher' due to a du > discussion I had with Mitch Kapor and another EFF person on > GEnie during an RTC that was ongoing. When questioned about > Tribe's proposal, the reply from the EFF was that it was intended > to get attention and not be taken literally. > --- > I would love to see it taken literally, myself. I would also love > to see it implemented. In relative reality ( sp upon sp ) . . . > it seems that Tribe's amendment will come about solely in piece > by piece of other bills that eveolve into laws. Until, eventually, > everythin he stated will have come to pass. The sooner the better. As Manavendra K. Thakur points out (quite eloquently, I might add) in his message <9107242141.AA27051@zerkalo.harvard.edu> in the same mailed digest, in reference to Andrew Trapp's comments on my original message: > Congress by itself cannot amend the constitution. Congress has to > pass the amendment, and then the states have to ratify the amendment. > > Yes, you are correct in that any amendment can be repealed or > replaced. But the fact still remains that Constitutional amendments > are difficult to pass and equally difficult (except perhaps in the > case of prohibition) to repeal. In fact, the prohibition amendment is > the only Constitutional amendment to be repealed. > > So yes, while what you hypothesize could happen, it would be very > difficult to convince a large number of people ("supermajorities" is a > term you often hear) that repealing the 4th amendment is a good idea. > And if such a supermajority does come into existence, then it would be > within its rights under the Constitution to repeal the 4th amendment > if it so wished. There is an enormous difference between a Constitutional amendment and protections granted by force of law. My free exercise of religion, for instance, or my freedom of speech are fundamental rights guaranteed by the Constitution, to which _every_ other law in the United States is inferior, and is a standard to which every law, Federal or state, may be compared. If any law infringes upon those rights unnecessarily, that law is unconstitutional. I do say "unnecessarily." The Federal government does have the right to regulate _some_ conduct: religious conduct, for example. In _Cantwell v. Connecticut_, 310 U.S. 296(1940), the case in which the Supreme Court extended the First Amendment's protection of freedom of religion to the states, the Court wrote: The Amendment embraces two concepts,-- freedom to believe and freedom to act. The first is absolute but, in the nature of things, the second cannot be. Conduct remains subject to regulation for the protection of society. (310 U.S., at 303-304.) I use freedom of religion as an example, because I am somewhat familiar with the case law. But Federal regulation of protected conduct extends to any sort of protected conduct. But only conduct protected in the Constitution is entitled to even this much protection. Were the Bill of Rights a Federal statute, its protections would be nowhere near so ironclad as they are. Congress might decide that "We need to take a look at it and maybe, from time to time, we should curtail some of those rights." That's what Chicago Police Superintendent LeRoy Martin suggested be done to the Constitution, by the way, not Los Angeles police chief Darryl Gates. In any case, I sincerely hope that the Tribe Amendment passes. Failing the Amendment's passage, I hope that the EFF and its attorneys are successful in persuading the courts to interpret the Constitution's existing protections so as to "...be construed as fully applicable without regard to the technological method or medium through which information content is generated, stored, altered, transmitted, or controlled." Which, after all, is the sole purpose of the Tribe Amendment, IMHO--to explicitly extend a protection implicitly extended already. When the authors of our Bill of rights wrote that "Congress shall make no law... abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the government for a redress of grievances," they didn't intend to omit electronic communications. One could argue that they did not intend to _include_ them either, true. But in 1789 there were three basic means of distributing information were known: speech, the printing press, and protest. The Framers did not wish repetitions of incidents under British rule such as the Zenger case, the Boston riot in which Crispus Attucks was killed, or even William Penn's imprisonment and "show trial," (in England) in which the _jury_ was jailed and threatened in an attempt to force a guilty verdict. Had they been but aware of the changes that our nation would see in two hundred years, or had they been aware that some day the courts would find that obscenity, of any sort would not be protected by the Constitution's provision for freedom of speech, I feel certain that they would have been more explicit in their drafting. As Thomas Jefferson wrote: I am mortified to be told that, in the United States of America, a question about the sale of a book can be carried before the civil magistrate. Are we to censor whose imprimatur shall say what book may be sold and what we may buy? Shall a layman, simple as ourselves, set up his reason as the rule for what we are to read? It is an insult to our citizens to question whether they are rational beings or not. Of course Jefferson was out of the country during the Constitutional Convention and the drafting of the Bill of Rights. Would that he had been in Philadelphia! As I think you can see, I am squarely in agreement with Amanda Walker's (also quite eloquent) statements with regard to the Bill of Rights' protections. The Bill of Rights protects obnoxious speech, such as that of the Chicago police superintendent above. But should that superintendent attempt to "...curtail some of those rights...." without having first _changed_ the Constitution, he will, I hope, find that violations of individual civil rights are Federal crimes, just as smoking crack and prostitution are state crimes. Mitch Silverman silverma@sunburn.ec.usf.edu Student, New College of the University of South Florida I speak only for myself, and sometimes not even that. ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: Fri, 26 Jul 1991 15:38:10 GMT Message-Id: <1991Jul26.153810.5953@eff.org> Organization: The Electronic Frontier Foundation From: kadie References: , <1991Jul24.041012.1592@eff.org> Subject: Re: Ohio State ACS policy This is a critique of a policy that was recently posted to the alt.comp.acad-freedom.talk newsgroup. Everything in quotes ("") is from the Joint Statement on Rights and Freedoms of Students. > Policy on Abuse of Computers and Networks > The Office of Academic Computing > The Ohio State University > Approved June 6, 1990 It doesn't say. But policy "should be developed at each institution within the framework of general standards and with the broadest possible participation of the members of the academic community." In other words, this policy should be consistent with the University's general policies and should be developed with the help of the system's users. >The use of computers and computer networks in no wat exempts us from the >nominal requirements of ethical behavior in the University community. Use >of a computer network that is shared by many users imposes certain >obligations. >In particular, data, software, and computer capacity have value and must be >treated accordingly. >Legitimate use of a computer or computer network does not extend to whatever >we are capable of doing with it. Although some rules are built into the >computer's operating system, these restrictions do not limit completely what >we can do and see. We are responsible for our actions whether or not the >rules are built into the system, and whether or not we can circumvent those >rules. Agreed. >The following specific principles of computer and network systems operated >under the direction of the Office of Academic Computing are applicable to Ohio >State students, faculty, staff, and contract employees. As users we must: > o Respect the privacy and rules governing the use of any > information accessible through the computer system or > network, even when that information is not securely > protected. The policy could be improved by mentioned that ACS will respect the privacy and freedom of expression of its users. > o Respect the ownership of proprietary software. For example, > do not make unauthorized copies of such software for your > own use, even when that software is not physically protected > against copying. > o Respect the finite capacity of systems, and limit your own > use so as not to interfere unreasonably with the activity of > other users. What is unreasonable? Who decides? Is any warning given? > o Respect the procedures established to manage the use of the > system. What procedures? How are they decided? Are they posted? >Those who cannot accept these standards of behavior may be denied access to >the relevant computer systems and networks. Will they be expelled from the computer forever? Can they ask for a hearing? Are the standards every made explicit? Who decides that the user cannot accept the standards? Is there any due process build in? Are students told of their rights? This policy lacks due process protections. The gist of the policy seems to be that 'if we decide that you break a rule (that we created, and you may not even know about), we can expel you from the computer forever.' Note that (at most schools) faculty can not (by themselves) expel a students from a class. It would be very strange of nonacademic University employees could (by themselves) expel students from a computer. Here are excerpts from the Joint Statement about due process. " VI. Procedural Standards in Disciplinary Proceedings In developing responsible student conduct, disciplinary proceedings play a role substantially secondary to example, counseling, guidance, and admonition. At the same time, educational institutions have a duty and the corollary disciplinary powers to protect their educational purpose through the setting of standards of scholarship and conduct for the students who attend them and through the regulation of the use of institutional facilities. In the exceptional circumstances when the preferred means fail to resolve problems of student conduct, proper procedural safeguards should be observed to protect the student from the unfair imposition of serious penalties." "The jurisdictions of faculty or student judicial bodies, the disciplinary responsibilities of institutional officials and the regular disciplinary procedures, including the student's right to appeal a decision, should be clearly formulated and communicated in advance." "In all situations, procedural fair play requires that the student be informed of the nature of the charges against him, that he be given a fair opportunity to refute them, that the institution not be arbitrary in its actions, and that there be provision for appeal of a decision." "The institution has an obligation to clarify those standards of behavior which it considers essential to its educational mission and its community life. [...] Offenses should be as clearly defined as possible and interpreted in a manner consistent with the aforementioned principles of relevance and reasonableness. Disciplinary proceedings should be instituted only for violations of standards of conduct formulated with significant student participation [...]." "2. Students detected or arrested in the course of serious violations of institutional regulations, or infractions of ordinary law, should be informed of their rights. No form of harassment should be used by institutional representatives to coerce admissions of guilt or information about conduct of other suspected persons." "C. Status of Student Pending Final Action Pending action on the charges, the status of a student should not be altered, or his right to be present on the campus and to attend classes suspended, except for reasons relating to his physical or emotional safety and well being, or for reasons relating to the safety and well-being of students, faculty, or university property." "When the misconduct may result in serious penalties and if the student questions the fairness of disciplinary action taken against him, he should be granted, on request, the privilege of a hearing before a regularly constituted hearing committee." >Violators may also be subject to >penalties under the regulations of the University and under laws of the State >of Ohio or the United States of America to the extent applicable. >I have read the above conditions and agree to abide by these standards. >Signature: ________________________________________________ Date: ____________ -- Carl Kadie -- kadie@eff.org or kadie@cs.uiuc.edu I do not represent EFF; this is just me. From kadie Sat Jul 27 10:47:33 1991 To: cafb-mail Subject: Computers and Academic Freedom mailing list (batch edition) Status: R Computers and Academic Freedom mailing list (batch edition) Sat Jul 27 10:46:59 EDT 1991 In this issue: cs.utexas.edu!heli : Re: Chicago's Supt. of Police (was Re: Computers and Acad europa.asd.contel. : Re: Administrator Access (Was Re: Ohio State) visix!news@uunet.u : Re: (none) "Carl M. Kadie" Organization: Texas A&M University From: cs.utexas.edu!helios!tamsun!cnh5730@uunet.uu.net References: , <1991Jul24.195959.27805@ux1.cso.uiuc.edu>un Subject: Re: Chicago's Supt. of Police (was Re: Computers and Academic Freedom mailing list (batch edition)) In article <1991Jul25.174030.12966@midway.uchicago.edu> swsh@ellis.uchicago.edu (Janet M. Swisher) writes: The Superintendent of Police in Chicago is named Leroy Martin. He recently returned from a trip to China, and expressed his admiration for their law enforcement [...] (Is it ironic to hear such things from a black man in a heavily segregated city, or is my irony meter out of whack?) Your irony meter is just functioning as a low-pass filter. If you turn up the threshold, you'll see that just as we had suspected all along, black men are remarkably similar to everyone else... some of them are butt-head neo-totalitarians just like white persons. In Texas, when presented with a local issue which involved censorship of freedom of expression, a local black male city councilperson (the only councilperson of color) told me that he supported censorship, that the morals of America were becoming degraded, and that we had to have some censorship to fix the situation. Moral of the story? When all persons are free, they will be free to be idiots. -- - I speak _ONLY_ for myself. _ONLY_. I do _NOT_ speak for anyone _BUT_ myself. ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 26 Jul 91 17:14:10 GMT Message-Id: <1991Jul26.170647.28903@mailer.cc.fsu.edu> Organization: Florida State University From: europa.asd.contel.com!gatech!mailer.cc.fsu.edu!fsu1.cc.fsu.edu!otto@uunet.uu.net References <16989@life.ai.mit.edu>, <1991Jul19.181817.5287@murdoch.acc.Virginia.EDU>, g Reply-To : otto@fsu1.cc.fsu.edu Subject: Re: Administrator Access (Was Re: Ohio State) In article , escott@clippers.shearson.com (E. Scott Menter) writes... >> From: wjb@cogsci.cog.jhu.edu >>reasonable to me. The only thing I would add is that if a users' data has >>been accessed as a result of an emergency situation that the user must be >>informed of that access after the emergency has been alleviated or a fixed >>time period has passed. (a week or two?). The user should also be informed >>what emergency required this action. This would probably even cover >>investigating possible "crackers" as that would seem to be an emergency >Not entirely. Say you thought a user might be doing something naughty, like >keeping a personal copy of some company-owned source code. You take a look at >his files, and find that not to be the case. Should you then send him email >saying "we thought you might be a dishonest jerk, but we checked it out and >decided you aren't one?" >Even when I worked in academia this wouldn't have been a popular approach 8^). It would make you think before violating someone's property, though. Such mistakes should be acknowledged. If you lose good employees as a result of too much spying, there will be a chance that you'll get the boot, as well. Trying to cover up such mistakes is dishonesty and I don't care to work for or with dishonest people. John G. Otto jgo@fsu.bitnet jgo@rai.cc.fsu.edu ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: Fri, 26 Jul 91 18:40:40 GMT Message-Id: <1991Jul26.184040.8090@visix.com> Organization: Visix Software Inc., Reston, VA From: visix!news@uunet.uu.net References: , <12910725223221.0003158580NA4EM@mcimail.com>=> Subject: Re: (none) 0003158580@mcimail.COM (William Hugh Murray) writes: > Well, there is toleration and toleration, tolerators and tolerators. > [I am confident that Ms. Walker understands this distinction; however I > am not so sure that she grants it.] As I understand you so far, I believe that I do. To elaborate a little, I understand the multiple meanings of "tolerate," and I have been addressing only one of them. "Tolerate" can, among other things, mean both "approve of" and "permit." Now, what you approve of, or like, is completely up to you and is no one's business but your own. Now, I personally think that broad "tolerance" by this meaning is a good thing, but I certainly cannot demand it of anyone. I have been adressing only the sense of "permit," i.e. the degree to which we must not interfere with others who are speaking or acting in ways we do not agree with. > [I note Ms. Walker's qualification: "as long as it causes no harm." I > would like to hope that qualification is big enough to embrace some of > these examples.] Indeed. > The origin of this prohibition is my perception of my obligation to the > rest of the community. The authority for the prohibition is my own > well-formed conscience. Agreed. There is also a flip side to this: there are quite legal (and conceivably mandatory) actions which I will not perform and words I will not speak, also because of my conscience. For example, I will not serve in the armed forces, or do work whose primary purpose is the construction of military equipment of any sort. > Second, I may not engage in behavior that would reflect discredit on my > profession. [...] True. These are, however, obligations that you took upon yourself, and could lay aside if you wished. I have been concerned in this discussion primarily with coercion--voluntary restrictions on behavior are not coercion. In fact, once again as long as it does not cause harm to others, I support the right to regulate your own behavior as much as you want, ranging from professional codes of ethics to bizarre bedroom behavior. Consent, especially informed consent, is another one of my primary values. > Incidentally, refusing to sponsor someone for professional advancement > is a form of non-toleration. Note that there are circumstances under > which, not only may I elect not to, but have a positive obligation not > to tolerate some classes of perfectly legal actions. [Perhaps Ms. > Walker has undertaken no such obligations; perhaps I remind her of some > that she has overlooked. Perhaps she only engaged in hyperbole or > posturing.] Not only have I undertaken such obligations, I have fulfilled them in just such a manner. > [... more examples ...] > [Oh, Ms. Walker there are all kinds of limits on my freedom short of law, > far too many to enumerate here. Let these few serve as examples.] Yes and no. I think you are blurring the distinction between what you *may* not do and what you *do* not do. It is quite apparent that you have a strong sense of obligation and self-discipline, and I commend you for it. However, as you yourself have pointed out, the authority for these restrictions that you have taken onto yourself is your own conscience and beliefs, not an external (or more specifically, governmental) authority. There are many things I do not do, but which I would greatly resist being prevented from doing. To take a trivial example, I do not own or bear a firearm, for my own personal reasons, but I very much value my right to do so. > None of this is to say that there are not causes in which I will take up > rude, extreme, or outrageous behavior. I hope that none of them are so > trivial as merely demonstrating that I can get away with it. Grin. I never said I *recommended* it, just that I allowed it. The law sets the *minimal* set of constraints on our behavior. What we do beyond that is up to us. -- Amanda Walker amanda@visix.com Visix Software Inc. ...!uunet!visix!amanda -- "Let my name stand among those who are willing to bear ridicule and reproach for the truth's sake, and so earn some right to rejoice when the victory is won." --Louisa May Alcott ------------------- Date: Fri, 26 Jul 91 15:14:01 -0500 From: "Carl M. Kadie" Message-Id: <9107262014.AA00439@m.cs.uiuc.edu> Subject: FYI: Proposed law on computer searches Date: Thu, 25 Jul 91 14:53:15 PDT From: xanadu!hibbert@uunet.UU.NET Subject: Proposed law on computer searches Don Ingraham was one of the prosecutors who talked at the Conference on Computers Freedom and Privacy in March. At the last session, he said he would write and propose new guidelines for prosecutors to follow that would take into account the concerns that were brought up at the conference. Last month, he gave a talk at the first meeting of the Berkeley SIG on Freedom, Privacy, and Technology (affiliated with BMUG and CPSR-Berkeley). He mentioned at that point that he had a draft, and I later asked him for a copy. When I asked him if I could redistribute it, he not only gave me permission, but encouraged me to do so. If you have suggestions on how to improve the draft, or if you represent a relevant group (CPSR, EFF, ACLU, and ACM come to mind) and would like to offer Don official support, he'd very much like to hear from you. Don isn't electronically connected, so you'll have to send him fax or paper mail, or call him on the phone. If there is interesting discussion here, I'll tell him about it, but I don't promise to show him every word. What follows is first Don Ingraham's summary, then the draft bill, and finally his commentary on what it means, and what he'd like to have happen with it. This is an important proposal, and it looks like quite a good law. Chris hibbert@xanadu.com uunet!xanadu!hibbert = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = PROPOSAL FOR PENAL CODE SECTION 1538.6: ELECTRONICALLY STORED MATERIAL. Revised 11 June 1991 Donald G. Ingraham, Assistant District Attorney, Alameda County, 1225 Fallon Street, Oakland CA 94612 4292 (415) 272-6232 fax 271-5157 The following is a proposal to add to the existing search warrant provisions of the Penal Code some particular restraints on the issuance of warrants which are required by federal law; it would also establish controls on the examination of electronically stored evidence seized in the course of a criminal investigation, and empower the Attorney General to monitor and regulate compliance with this law. There are four main aspects: first, it recognizes the existing restraints of federal law, in particular the Privacy Protection Act (42 USC 2000aa) portion of the Civil Rights Act, and also chapter 212 of the Electronic Communications Privacy Act (18 USC 2700 et seq) dealing with stored electronic communications. The portion of the ECPA which addresses the interception of electronic communications is covered by existing law. second, it establishes the Attorney General of California in a monitoring and regulatory function, not unlike the function now performed in regard to criminal offender record information. In the following text, references to federal law appear in parentheses. third, it establishes criteria for the inventory and analysis of electronically stored evidence, and affords the person from whom it was seized and other interested parties standing and information to present their interests and concerns to the issuing magistrate. fourth, it balances law enforcement's necessary investigative authority with the privacy and personal interests of persons affected by the investigation. This topic is of such significance that it is suggested there be a specific legislative declaration such as this: = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = Legislative finding: The legislature finds that investigation and prosecution of crimes in which computers are involved engenders a risk to other rights, including those to conduct a business, to publish, and to conduct private communications. This section clarifies existing requirements of the federal Electronic Communications Privacy Act and the Privacy Protection Act, and also invests the Attorney General with authority to regulate the analysis and examination of electronic media seized under the authority of this chapter. Addition to Chapter 3, Search Warrants, Title XII, Special Proceedings of a Criminal Nature, California Penal Code. Section 1536.5 A search warrant for computer-related material cannot be authorized except in compliance with the following restraints. All electronically stored material seized, under a search warrant or otherwise, shall be retained and analyzed as follows: [a] if the content is reasonably apparently identifiable as intended for publication, a search warrant may be authorized only if the affidavit to that warrant specifically provides probable cause that the material is contraband or the fruits of a crime or things otherwise criminally possessed, or is property designed or intended for use, or which is or has been used as, the means of committing a criminal offense. (This is directly from Title 42 USC 2000aa(7).] [b] if examination of electronically stored communications indicates that any particular file is a communication intended to be private and neither party thereto is named as a subject of the search warrant, and the material has been in such storage for under 180 days, the investigating officer may not continue the analysis nor proceed further without obtaining a search warrant for stored electronic communication, as defined by regulations issued by the Attorney General. (This is adapted from Title 18 USC 2703: the term 'search warrant for stored electronic communication' appears in that Title as a term of art.] [c] within five court days of any seizure of stored electronic material, the investigating officer will file a supplement to the inventory required by section 1537 which will list all electronic material with all available specificity, including but not limited to file names then identified, and indicate what procedures for analysis are being taken. A copy of that and any subsequent inventories will be furnished to the subject of the search warrant. A further supplement will be filed with the issuing magistrate every tenth court day thereafter until all electronic material has been analyzed. A copy of all such inventories will be part of the court record and open to public inspection. [d] Electronic stored media will be analyzed as expeditiously as possible and in the following order: first, material recognizably necessary to the conduct of legitimate business and private communications; second, material recognizably central to the crime under investigation; third, material reasonably suspected of relating to the crime under investigation. The magistrate shall direct the investigating office or prosecutor to return or copy such material to the owner, providing a receipt for the court record. [e] After the filing of the initial inventory, any person who has reason to believe that he or she would be unfairly adversely affected in business or communications by the retention or analysis of the seized electronic material may petition the issuing magistrate for a hearing to demonstrate that the proposed retention and/or analysis would result in significant injury to a legitimate purpose. [This provision expands upon existing Calif PC 1538.5, but is specific to electronic media; there is no known federal counterpart. The provision for return by DA, receipt to Court, regular accounting and standing to others affected is not fantasy: we did as much in our Draper prosecution with mutually beneficial effect.] [f] The Attorney General shall establish regulations for the seizure, examination, and disposition of electronic material obtained in the process of criminal investigations consistent with the intent of this section that intrusion and disruption be as minimal as the requirements of an investigation permit, and in keeping with federal regulation. [This section empowers the Attorney General to keep computer related criminal investigations by our law enforcement agencies consistent with federal law, without the need to go to the legislature to accommodate changes in the federal law.] = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = Comment, primarily intended for prosecutors, but open to all This is the draft of a bill on search warrants for electronically stored material, which will probably be introduced next session: I need to line up AG and other support for it to fly. To put the idea in context, please be aware that Penal Code 1538.5 covers review of searches and is the basis of our traverse motions. It seemed the logical place to put this, rather than in our Computer Crime section-502- or under privacy. The idea is to get a legislative purpose statement, and then flag areas of concern and potential federal liability: (a) flags the First Amendment Privacy Protection Act, 42 USC 2000aa, which addresses : ... any work product materials possessed by a person reasonably believed to have a purpose to disseminate to the public a newspaper, book, broadcast, or other similar form of public communication, in or affecting interstate or foreign commerce.." which I try to boil down by the phrase "intended for publication", adding a prefatory qualification, that it be "reasonably apparently identifiable" as such. The federal act makes no such allowance, although I cannot imagine a court imposing it: as it now reads it is rather like forbidding us to open any cabinet that may contain more than one paper clip, at our peril. (b) does the same flagging as to Chapter 212, Electronic Communications Privacy Act, 18 USC 2700 et seq, again clarifying that it does not apply if one of the parties is already named in the warrant. This would assume that the possibility of electronically stored communications was anticipated by the warrant, which should always be the case. The legislative history is barren on this, but what standing would an intruder have to object? (c) through (e) create something new, not in the federal law. This basically is a response to the main complaint about the usual investigation, which is that the gear and files disappear into the maw of the eagle, and are seldom if ever heard from again. Having someone say "we're working on it" every other month is not what I think James Madison had in mind. I think that such limbo should not be imposed, assuming that it ever is, and the best way to keep that from happening would be to require a regular accounting and progress report. This would not only be reasonable, but it would also accomplish two other boons: it would give us a need to keep our investigation going instead of watching our resources get reassigned, and it should forestall more draconian controls if this perception gets any more widespread. We did exactly this when we prosecuted John "Captain Crunch" Draper, and it worked well. I wouldn't try to process evidence any other way. (f) would empower our Attorney General to establish regulations for the search of electronically stored material much as the AG now sets the policies on confidentiality and privacy of Criminal Offender Record Information/"rap sheets". Going by administrative regulation rather than by way of additional legislation guarantees that we will not stray from federal rules, which should keep civil rights prosecutions of prosecutors per 42 USC 1983 at a minimum. What is needed to bring this about? The basic hope is to have it debugged and ready to submit by October: ready to submit means, among other things, that we have some organized support from concerned citizens. The immediate hope is that both law enforcement and civil libertarians will see the wisdom of structuring what is now not as structured and be willing to support it. The idea is to keep it clean and simple; if glitches later develop, we could amend it again, but the essential aspect at this point is to get legislative recognition of the fact that search warrants for electronic material are already different from search warrants for other things. If we do that, and can get the Attorney General to agree, it should fly. My fondest hope is that come October I could represent to the appropriate legislator that the AG, the CDAA, the ACLU, the CPSR, and the academic and business communities thought this a heck of an idea, and in their view essential. In summary, and in particular regard to the concerns of prosecutors like me, this proposal would avoid the need to develop an electronic privacy measure in California by adopting the federal law, and giving the Attorney General the responsibility to keep up with its amendments through the California Code of Regulations. Two other states, Utah and Florida, have crafted their own versions of the federal Electronic Communications Privacy Act; that independent course risks inconsistencies and uncertainties as the judicial process construes the ECPA. The enactment of this proposal would avoid that, while at the same time providing all available guidelines to law enforcement and to citizens concerned with the freedom to use computer technology and with electronic privacy, who are, after all, a significant portion of the People in whose behalf we prosecutors are privileged to appear. ------------------- Date: Fri, 26 Jul 91 21:44 GMT From: William Hugh Murray <0003158580@mcimail.com> Subject: Message-Id: <43910726214434/0003158580NA3EM@mcimail.com> Amanda Walker, I believe that we are kindred souls. I hope that I can win your support. >However, as you yourself have pointed out, the authority for these >restrictions that you have taken onto yourself is your own conscience and >beliefs, not an external (or more specifically, governmental) authority. Just so. However, what concerns me here is the evidence in the thread that many take license from the limits of governmental authority. That is they believe that all things which are not prohibited by government are permissable, and perhaps even mandatory. History is clear that license encourages government. There are all kinds of bills working their way through the legislatures which are intended to limit what we do here in the name of public order. All of them look for their justification to a tiny bit of atypical, but outrageous behavior. Those who have perpetrated that behavior, and put our freedoms at risk, have justified that behavior on the basis that it is not prohibited or is a justified rebuke to abusive authority. What you are concerned about is protecting those freedoms already guaranteed by the Constitution. What I am trying to protect is that zone of freedom between what the government already regulates and that which the Constituion says it may not. That zone is very fragile; it is being put at risk by outrageous behavior, essentially gratuitous, by a small few. They are taking comfort and justification from your arguments which I do not believe that you intend. It is clear that you have a strong ethical sense which they do not share. Your refusal to characterize that behavior as extreme or outrageous, to personally forego it in the name of preserving freedom, contributes to the problem. I am willing to forego rude, extreme, and outrageous behavior in the name of order to and to forestall authoritarian intervention in an area where it is not needed or useful. I invite you to join me. I am willing to characterize and condemn as abusive of freedom, that behavior which invites authoritarian intervention. We need your support. Your example of gun control is perfect. I too do not and would not own a firearm. As a matter of conscience, I, the world's ultimate toy freak, forego a toy that I have every right to own and am trained and qualified to use. I too cherish the right to own one and do not want the government to interfere with that right. But if you do not believe that "the powers that be" will restrict that constitutionally guaranteed right to bear arms if all these shootings do not diminish, then you have not read enough history. Now you and I agree that the right to use a computer is fundamental and subject to Constitutional guarantees. You likely agree with me that the use of computers is fundamentally orderly and does not need to be regulated. But I guarantee you, if the extreme, but atypical, behavior in the net continues, government will be all too quick to step in. Now you and I will agree that that behavior is not significant. It is not even in the same realm with people shooting members or their families, their neighbors, strangers on the freeway, or babies in their beds. But neither is the right to use a computer any way one wants on the same list as the right to bear arms. As fundamental as it may be, it is derivative, not explicit. As trivial as the offenses in the net are, they frighten people. Frightened people turn to protective government and they voluntarily surrender their rights. Government feels justified and is all too happy to oblige. Now quite candidly, as much as I value the freedom to bear arms, I have already personally given it up. When little babies are not safe from stray bullets in their beds, I am ready to surrender some of your freedom. If things get much worse, I may be ready to support a constitutional amendment. If you believe that it will not get a lot of support, then you do not watch enough TV. And if you think that people cannot become sufficiently frightened of computer hackers to surrender your right and mine to use computers as we like, then you must think that they value freedom one hell of a lot more than I do. William Hugh Murray New Canaan, Connecticut ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 27 Jul 91 02:38:53 GMT Message-Id: <1991Jul27.023853.22723@bradley.bradley.edu> Organization: Bradley University From: snorkelwacker.mit.edu!usc!zaphod.mps.ohio-state.edu!think.com!spool.mu.edu!uwm.edu!ux1.cso.uiuc.edu!bradley.bradley.edu!dave@world.std.com References <1991Jul24.195959.27805@ux1.cso.uiuc.edu>, <9107242141.AA27051@zerkalo.harvard.edu>, <1991Jul25.174030.12966@midway.uchicago.edu>du Subject: Re: Chicago's Supt. of Police (was Re: Computers and Academic Freedom mailing list (batch edition)) swsh@ellis.uchicago.edu (Janet M. Swisher) writes: >The Superintendent of Police in Chicago is named Leroy Martin. He >recently returned from a trip to China, and expressed his admiration >for their law enforcement and prison policies, and a desire to do away >with some civil rights (due process, and protection from search and >seizure) in order to emulate them. There has been hardly any public >outcry about his statements. People are naive that way. People figure that it will only effect them by removing people from the street easier. All it takes is one false accusation against them, though, and they change their mind in a hurry. But as long as it's against 'criminals' it's okay. My mom has been with our Sheriff's Department back home for 13 years, and about 6 years as a detective. She honestly believes that people nowadays have too many rights. The first time she said that, I damn near fell out of my chair.... -- ========*davE*......making the world safe for intelligent dance music.======== This section may be skipped if you are not interested in b-trees. You can use Informix-4GL without knowing what a b-tree is. (David Vessell) (Bradley University Computing Services) (dave@bradley.edu) ------------------- Date: Sat, 27 Jul 91 03:22 GMT From: William Hugh Murray <0003158580@mcimail.com> Subject: Message-Id: <25910727032252/0003158580NA2EM@mcimail.com> >"All these shootings"? What does gun control have to do with crime? >Certainly none of the current bills (with the possible exception of >the Stagger's bill defeated in the House) have anything to do with >crime. They are merely regulation for regulation's sake. Exactly, Mr. Greely. If you will not hear my words, then re-read your own -- over and over -- until you get the message. When people are frightened they turn to government. That government is not effective has little to do with it. That the laws proposed limit freedom without dealing with the problem does not make any difference. I may not be able to limit your freedom Mr. Greely, and have little motive to do so, but government can and will. It thrives on anger, disorder and fear. Take me at my word, Mr. Greely, and spare me your righteous indignation; it is wasted on me. William Hugh Murray New Canaan, Connecticut ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 26 Jul 91 23:29:39 GMT Message-Id: <5493@orbit.cts.com> Organization: Orbit TimeSharing [orb], Minneapolis, Mn. From: snorkelwacker.mit.edu!bu.edu!stanford.edu!msi.umn.edu!cs.umn.edu!quest!orbit!whir@world.std.com Subject: Hamline Univ shuts off account w/o notice or stated reason This tale tells more of traditional institutional politics (and its inertia), I guess, than of how technology is pushing rights and liberties. I have been a reader and sometime speaker in the Usenet since 1984, having had access at a big government place. I've been getting back to school and found them open to making papers in a Unix environment and keeping access to this community. Last fall i began an MALS (liberal studies not library science) at Hamline U and approached the computer people about a Unix machine and account. "Sure, we have this new Sequent, it's primarily used for administration, but there's a math professor who is interested in those packages and is getting them. And we are going to connect to the Internet in a couple weeks." And it was a fine semester, even though the Internet connection wasn't made until the very end of it. Everyone was friendly including the to-be-mentioned cheese. Before the next semester began I approached (perhaps the wrong guy and at the wrong time) the system administrator's boss, as I was steered, because my schedule had changed and I was wondering about getting printout. He was miffed that `word processing' was happening on his machine, I was flabbergasted -- I wondered what constituted word processing. That evening i found, without any notice, that my account had been disabled. I did meet shortly thereafter with the previously quite congenial, ow completely mute system administrator and his (the) director of computing and telecommunications services. To make a long story short, no one else at Hamline was competent nor willing to listen to my case. The only person who new what kind of issue this was was the math professor, who no one would call. Before the end he took it on himself to see the MALS director, who "was like a brick wall." I did find after repeated searches that Hamline has an ombud, a good listener though ineffectual. (BTW, early on when no one was listening, I refused to pay my tuition until someone would. I found the ombud and withdrew from Hamline a couple days too late as far as they are concerned. They have now threatened collection...) What happened? It seems pretty clear that this Unix-naive guy above the system administrator was uncomfortable with the combination of Internet, administration parts of the file system and a user who wasn't using a mainframe in the manner that computers were used before communication merged. Other accounts were given to novices shortly after I was disconnected. The teacher, of course, retains his account. I did hear second-hand noises about putting my files on tape or letting *me* back on when they got things "set up," in some undefined period. But between the lines clearly and singly was, "We don't trust you." It was for this reason and a deaf administration that I withdrew. I will in a matter of days no longer be at this address, returning to the net about Sept 7, most likely as whir@csd4.csd.uwm.edu. If someone would keep a file of any follow-ups generated I'd appreciate it. Mail will also, I think, be held at allard@max.bnl.gov. Thanks are to Wojciech. ooooooooooooootter#spoon in bowl !!!!!!!!!!!!& RooM & !!!!!!!!!!!!R oooo M ------------------- Message-Id: <9107270416.AA19799@eff.org> From: "Dean Gottehrer" Subject: Perilous thread? William Hugh Murray makes wonderful arguments about responsible behaviors as a way to guarantee freedom. I couldn't agree more that responsible behavior means little likelihood of freedoms being limited. But I'm not quite ready to go the next step and predict that unless we condemn extreme behaviors we will lose our freedoms. I have been close enough to the legislative process in my state (I worked as an aide to my representative for a session and was legislative liaison for the commissioner of administration for another session) to understand how difficult it is to get laws passed. I guarantee you it is much easier to kill legislation than it is to breathe life into it. And despite all of the polls that show lack of support for the Bill of Rights, I have a basic fundamental faith in the ability of the American people to preserve their freedoms through all the threats technology can and has posed in recent decades. So while I support responsible, moral, ethical behavior and am willing to attack anti- or undemocratic behavior, I don't believe that our freedoms hang from so perilous a thread that unless we speak out against extreme behavior we will lose our freedoms or some part of them. One other area where I diverge from Mr. Murray and Ms. Walker is that I believe freedom is a use it or lose it commodity. Reading their discussions about the right to bear arms, I was struck how different they might seem if we substituted freedom of speech or press. (To edit and paraphrase Mr. Murray with a smile: I too do not and would not own a printing press. I too cherish the right to own one and do not want the government to interfere with that right. But if you do not believe that "the powers that be" will restrict that constitutionally guaranteed right to a free press if all this free speech does not diminish, then you have not read enough history.) I do own guns. I never owned one before I moved to Alaska. I only bought one most reluctantly when I had to worry about the prospect of difficult-to-deal-with bears when I lived 15 miles from town and had some neighbors who did not believe in owning guns. Fortunately I never had to use them, but there are millions of people who believe in the right to bear arms and I suspect many of them don't believe in freedom of speech or press. Finally, government *will* intervene and regulate the net and computers. I don't think it is a matter of if, it is a matter of when. Our society is too litigious. Someone will sue over an extreme and outrageous act of a system administrator somewhere and law will be built on those actions. These laws will first be written by courts rather than Congress or the state legislatures. Deliberative bodies move very slowly and not at all if the constitutents of a problem do not reasonably agree what the solution is. Only the light of public opinion shining on a problem speeds up the process. I doubt that is likely to happen any time soon with computers. A freedom preserved but unused is no freedom at all. Dean Gottehrer Anchorage, Alaska ------------------- Date: Sat, 27 Jul 91 13:49 GMT From: William Hugh Murray <0003158580@mcimail.com> Subject: Message-Id: <83910727134938/0003158580NA1EM@mcimail.com> Dean Gottehrer: >William Hugh Murray makes wonderful arguments about responsible >behaviors as a way to guarantee freedom. Did not intend to so argue. Rather, I argue that it takes all too little gratuitous outrageous behavior to cause its loss. Freedom is never finally won and guaranteed. The U.S. Constitution notwithstanding, freedom is under constant attack. It must be defended and contended for every day, forever. The argument is how best to do so. >Finally, government *will* intervene and regulate the net and computers. I >don't think it is a matter of if, it is a matter of when. Our society >is too litigious. Someone will sue over an extreme and outrageous act >of a system administrator somewhere and law will be built on those >actions. These laws will first be written by courts rather than >Congress or the state legislatures. Perhaps, but let it not be said that any of the things that we did to rush it were trivial or poorly motivated. At any rate, bad precedent is easier to remedy than bad law. Bad regulation is the most resistant to remedy of all. >A freedom preserved but unused is no freedom at all. True, and probably more true of speech than of other freedoms. I do not argue that we should foreswear speech. I do not argue that we foreswear outrageous speech in the name of principle or significant causes. I argue that we foreswear gratuituous outrageous speech in the name of trivial causes so as not to take unnecessary risk of inviting unnecessary intervention in our freedoms. Specifically, to bring the argument back to where it began, I argue that we should forego, as a matter of personal discipline, but collegial authority if necessary, certain limited kinds of abusive behavior that we have seen here in the net. Specifically and to wit, "rude (inconsiderate of the rights of others) behavior on the part of users, not simply naivete" and "over-reaction on the part of administrators, not simply attempts to preserve order." Now it seems to me that that is little enough to ask. It amazes me how much rhetoric, passion, and anger this very limited argument has raised. It amazes me that so much has been said so well in defense of such behavior. It saddens me that there has been so much defense of outrage and only a little grudging consent to responsibility. I take what comfort I can in the fact that, while few will argue for polite behavior, most of the net continues to be orderly. William Hugh Murray New Canaan, Connecticutt From kadie Sun Jul 28 14:34:47 1991 To: cafb-mail Subject: Computers and Academic Freedom mailing list (batch edition) Status: R Computers and Academic Freedom mailing list (batch edition) Sun Jul 28 14:34:35 EDT 1991 In this issue: snorkelwacker.mit. : Re: (none) Sanjay Kapur Organization: Ohio State University Computer and Information Science From: snorkelwacker.mit.edu!usc!elroy.jpl.nasa.gov!swrinde!zaphod.mps.ohio-state.edu!cis.ohio-state.edu!morganucodon.cis.ohio-state.edu!jgreely@world.std.com References: , <25910727032252.0003158580NA2EM@mcimail.com>l. Subject: Re: (none) Thank you for posting private mail without at least the courtesy of asking. It's nice to see that you are rude as well as ignorant. In article <25910727032252.0003158580NA2EM@mcimail.com> 0003158580@mcimail.COM (William Hugh Murray) writes: >Exactly, Mr. Greely. If you will not hear my words, then re-read your >own -- over and over -- until you get the message. I got the message that I wrote. I haven't the slightest idea what you read. >When people are frightened they turn to government. What a lovely sweeping generalization! Bullshit, but still lovely. >Take me at my word, Mr. Greely, and spare me your righteous indignation; >it is wasted on me. Your word is scribbled in crayon, and as for righteous indignation, "Mr. Kettle, Pot on line 1". "Spontaneous combustion! What a stroke of luck!" -- J Greely (jgreely@cis.ohio-state.edu; osu-cis!jgreely) ------------------- Date: Sat, 27 Jul 1991 15:54 EDT From: Sanjay Kapur Subject: Re: Perilous thread? Message-Id: X-Organization: State University of New York, Stony Brook X-Vms-Cc: SKAPUR >Sender: Dean Gottehrer > >(To edit and paraphrase Mr. Murray with a smile: I too do not and would not >own a printing press. I too cherish the right to own one and do not want the >government to interfere with that right. But if you do not believe that "the >powers that be" will restrict that constitutionally guaranteed right to a free >press if all this free speech does not diminish, then you have not read enough >history.) > There is one error in the paraphrase: The right to keep and bear arms does not include the right to shoot people. The right to free speech and a free press both are separately enumerated. I do not believe that Mr. Murray was referring to shooting as in hunting, firing range practice or self defense but to random shootings or shootings related to other crimes like drugs or muggings. The last sentence in the paraphrase should be modified to: But if you do not believe that "the powers that be" will restrict that constitutionally guaranteed right to a free press if all this printing that does grevious injury to persons does not diminish, then you have not read enough history. Freedom of speech has been and still is restricted quite often in this country and throughout the world when outrageous speech is uttered. A good example is freedom to yell "Fire" in a crowded theatre. Another good example on the restriction of both press and speech is the restriction on the freedom to publish defense secrets. Another example is the beating of peaceful anti-war demonstrators in the late sixties and early seventies (right of the people peaceably to assemble) Another example is a dictator shutting down presses only after they criticized the dictator. Sanjay Kapur |Internet: Sanjay.Kapur@sunysb.edu Systems Staff, Computing Services, |Bitnet: SKAPUR@USB State University of New York, |SPAN/HEPnet: 44132::SKAPUR Stony Brook, NY 11794-2400 |Phone:(516)632-8029, FAX:(516)632-8046 ------------------- Received: from USENET by eff with netnews for caft-mail@eff.org (comp-academic-freedom-talk@eff.org); contact usenet@eff if you have questions. Date: 28 Jul 91 05:05:30 GMT Message-Id: <26367@well.sf.ca.us> From: apple!well!nagle@decwrl.dec.com References: , <5493@orbit.cts.com>le Subject: Re: Hamline Univ shuts off account w/o notice or stated reason I respect this person for putting his money where his mouth is, by withdrawing from the school over this issue. An effort by the school to collect from him could be interesting, since he's raising a breach of contract issue. I doubt that they will make a major effort to collect if it is made clear that they will have to justify their behavior in court. John Nagle Prof: "Me professor. You student." Student: "Me customer. You employee."