Re: [logs] Logging standards?

From: Rebecca Kastl (rkastlat_private)
Date: Mon Oct 29 2001 - 12:59:46 PST

  • Next message: edward.j.sargissonat_private: "Re: [logs] Logging standards?"

    On Mon, 29 Oct 2001, Shane Kerr wrote:
    
    > > I think the privacy you refer to is from "other users", but honestly
    > > how is it possible that you and the Systems Admins and Auditors would
    > > or could not know each other more intimately.
    > >
    > > So - I ask again - what real expectation of privacy is there in a Time
    > > Sharing System, other than by potential agreement between the users?
    >
    > This isn't the same question that you asked originally.  You simply said
    > that users should have no expectation of privacy, because the scheduler
    > has to track what processes are doing.
    >
    > To me, this is akin to saying you have no reason to expect
    > confidentiality from your physician because he has to know what ailments
    > you suffer from.  Hogwash!  How can I *prove* that my doctor isn't
    > sending reports of my various STD's to the press?  Well, I can't.  That
    > doesn't mean I should expect my doctor to publish my private
    > information.
    
    I disagree with you, and don't think you are presenting a valid argument or
    acccurate analogy.
    
    First off, there can be no expectation of privacy on a multi-use
    (time-sharing) system.  In adddition to the reasons stated by Todd Glassey,
    the system owner is able to monitor as they wish without having to explicitly
    state they are doing so.
    
    If you walk into a business (your employer, for instance), whether or not you
    feel it is reasonable, that business has a right to conduct video surveillance
    on you, monitor your access to the building, and monitor your access to
    various building areas (e.g. use of proximity/swipe cards, security logs,
    etc.).
    
    In businesses where such systems are implemented, you cannot have any
    expectation of privacy (except in the restrooms -- maybe).  The same goes for
    a system implemented in the course of business (or some other capacity).  You
    are granted use with the implicit understanding that you may be monitored.
    Don't think so?  Walk into a record store at the mall -- you're being
    surveilled.
    
    
    As Todd asked, "what real expectation of privacy is there in a Time Sharing
    System, other than by potential agreement between the users?"  There isn't.
    
    
    --Rebecca Kastl
    
    
    
    ---------------------------------------------------------------------
    To unsubscribe, e-mail: loganalysis-unsubscribeat_private
    For additional commands, e-mail: loganalysis-helpat_private
    



    This archive was generated by hypermail 2b30 : Mon Oct 29 2001 - 13:51:17 PST