Re: Future Handling of Blue Sheets

Yoav Nir <ynir@checkpoint.com> Mon, 23 April 2012 06:55 UTC

Return-Path: <ynir@checkpoint.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A43F421F8495 for <ietf@ietfa.amsl.com>; Sun, 22 Apr 2012 23:55:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.553
X-Spam-Level:
X-Spam-Status: No, score=-11.553 tagged_above=-999 required=5 tests=[AWL=1.046, BAYES_00=-2.599, GB_I_LETTER=-2, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2lZHM6XGoXxu for <ietf@ietfa.amsl.com>; Sun, 22 Apr 2012 23:55:51 -0700 (PDT)
Received: from michael.checkpoint.com (smtp.checkpoint.com [194.29.34.68]) by ietfa.amsl.com (Postfix) with ESMTP id 41FA821F844A for <ietf@ietf.org>; Sun, 22 Apr 2012 23:55:48 -0700 (PDT)
Received: from il-ex01.ad.checkpoint.com (il-ex01.ad.checkpoint.com [194.29.34.26]) by michael.checkpoint.com (8.13.8/8.13.8) with ESMTP id q3N6ta8U011258; Mon, 23 Apr 2012 09:55:40 +0300
X-CheckPoint: {4F95097F-1-1B221DC2-5FFFF}
Received: from il-ex01.ad.checkpoint.com ([126.0.0.2]) by il-ex01.ad.checkpoint.com ([126.0.0.2]) with mapi; Mon, 23 Apr 2012 09:55:34 +0300
From: Yoav Nir <ynir@checkpoint.com>
To: Joel jaeggli <joelja@bogus.com>
Date: Mon, 23 Apr 2012 09:54:24 +0300
Subject: Re: Future Handling of Blue Sheets
Thread-Topic: Future Handling of Blue Sheets
Thread-Index: Ac0hHhSkAWtRI0pkSBqD3jlTlzfl1g==
Message-ID: <35A52857-6545-4CF7-A8F0-48B10382445E@checkpoint.com>
References: <2AC114D8-E97B-47A0-B7E0-9EF016DCB09F@ietf.org> <4F94D01F.3070102@gondrom.org> <DDB8050A-7A04-4A0F-A364-0E3E511DCB43@vigilsec.com> <4F94E4AB.5080706@gondrom.org> <4F94EB97.3080906@bogus.com> <4F94EC7E.6040101@raszuk.net> <4F94F007.6060005@bogus.com>
In-Reply-To: <4F94F007.6060005@bogus.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
x-kse-antivirus-interceptor-info: scan successful
x-kse-antivirus-info: Clean
x-cpdlp: 11e228a557d98e59bbd1b0ec73bf15c6d28a239f11
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "ietf@ietf.org" <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Apr 2012 06:55:53 -0000

On Apr 23, 2012, at 9:00 AM, Joel jaeggli wrote:

> On 4/22/12 22:45 , Robert Raszuk wrote:
>> Joel,
>> 
>>> What property of the blue sheet makes it personal data.
>> 
>> WG meeting title and name or email address.
>> 
>> Nothing more helpful for recruiters to get hold of such list and start
>> spamming with job offers in given area of technology.
> 
> The participants are readily identifiable already.

Effort matters. If getting that data requires a subpoena, or if it requires a formal letter from a lawyer, or if it's available on the website, these are different things. I'm with Tobias on this.

> But that wasn't my question. What data on the blue sheet is personal?

It says where I was, and at what time, and it's nobody's business. It's information that does not need to be disclosed to the public, and therefore shouldn't. We don't have to come up with an attack vector first. 

> Every person who has registered since at least the publication of 3979
> if not before has consented to the public disclosure of records of the
> meeting. a list of the meeting attendees is required by 2418.

Again, this is a different level of information. On the streets, Legally I don't have an expectation of privacy. The police, or anyone who cares to, may follow me around, and see where I'm going. There is, however, a huge const involved in this, and that's why 20 years ago, people did have an expectation of privacy on the streets. Having surveillance cameras at street corners like they have in too much of the western world right now does not change what the police can or cannot do to an individual. There is a huge change, though, because now they can afford to track everyone all the time. 

Connect those cameras to the Internet as publicly accessible webcams, and our society turns into a whole new kind of surveillance society. Publishing blue sheets is not as bad as that, but it's a step in the wrong direction.

Yoav