Gaming the System [Was: AD Sponsorship of draft-moonesamy-recall-rev]

"Adrian Farrel" <adrian@olddog.co.uk> Sat, 20 April 2019 11:49 UTC

Return-Path: <adrian@olddog.co.uk>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 592EC120092; Sat, 20 Apr 2019 04:49:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.59
X-Spam-Level:
X-Spam-Status: No, score=-2.59 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, T_FILL_THIS_FORM_SHORT=0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wTPkDSbIU6S5; Sat, 20 Apr 2019 04:49:37 -0700 (PDT)
Received: from mta5.iomartmail.com (mta5.iomartmail.com [62.128.193.155]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4966812002E; Sat, 20 Apr 2019 04:49:36 -0700 (PDT)
Received: from vs1.iomartmail.com (vs1.iomartmail.com [10.12.10.121]) by mta5.iomartmail.com (8.14.4/8.14.4) with ESMTP id x3KBnU4f005528; Sat, 20 Apr 2019 12:49:30 +0100
Received: from vs1.iomartmail.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 93EBA2203B; Sat, 20 Apr 2019 12:49:30 +0100 (BST)
Received: from asmtp2.iomartmail.com (unknown [10.12.10.249]) by vs1.iomartmail.com (Postfix) with ESMTPS id 7ED4F2203A; Sat, 20 Apr 2019 12:49:30 +0100 (BST)
Received: from LAPTOPK7AS653V ([87.112.207.72]) (authenticated bits=0) by asmtp2.iomartmail.com (8.14.4/8.14.4) with ESMTP id x3KBnT5D022606 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Sat, 20 Apr 2019 12:49:30 +0100
Reply-To: adrian@olddog.co.uk
From: Adrian Farrel <adrian@olddog.co.uk>
To: 'Alissa Cooper' <alissa@cooperw.in>
Cc: 'IESG' <iesg@ietf.org>, ietf@ietf.org
Subject: Gaming the System [Was: AD Sponsorship of draft-moonesamy-recall-rev]
Date: Sat, 20 Apr 2019 12:49:29 +0100
Organization: Old Dog Consulting
Message-ID: <033401d4f76f$1ce49540$56adbfc0$@olddog.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 16.0
Content-Language: en-gb
Thread-Index: AdT3bxQJBJR83rpDRDS8u3xb5dvl3g==
X-Originating-IP: 87.112.207.72
X-Thinkmail-Auth: adrian@olddog.co.uk
X-TM-AS-GCONF: 00
X-TM-AS-Product-Ver: IMSVA-9.0.0.1623-8.2.0.1013-24562.007
X-TM-AS-Result: No--15.361-10.0-31-10
X-imss-scan-details: No--15.361-10.0-31-10
X-TMASE-Version: IMSVA-9.0.0.1623-8.2.1013-24562.007
X-TMASE-Result: 10--15.361200-10.000000
X-TMASE-MatchedRID: VTZG8gdv4l6WSu37KqZRoZmug812qIbzrDEJQSM/J21RXC4cX65cJCHz vqYKd/egOZqMeZmW6O+lqGWeT7lea/5d7yxEuu/eS8S2F9lkvO8wynv1/gRLkGnf+v+Bv9Dlet4 /iHXi7/9MJBA2VIYRNi9BcVjiFee6tpeV41PU7EfY5KPiokD1Bk/DGT3XA8UY7ynGrUv2DpT06z +XvHnOwVcoVThFiMD1m0ox61nndG8E7MuQrZP2o8OvQCMFyZ9G1WWRh/D0YADfUZT83lbkEOq/U 0K00q4pmRRoR6Q5vz7Ngz7AfzbtbpendmF8vZYzP7hrgLVtfUElWygvtTclwF0G+qr07TbNkk1U CWc2BMiQ64r8/aGbdrjeUBgUliXihhbyY5TF+t39zT4slMys3RbZsplSG8S62+mPn502VC9g0AR /2aWYDNH/BniTUzp8ycSs9fVCfPSmnzFWe+TBCW9UcS/LykY+5GzAEk8IK4j+TzMKYU0BSq0Z+2 JgXjFqhz4WSu+AB2XIt0ZugjPrIIuLXAHXNQlQphvn2pPa92qM8oPQNJSuDt4708QdH6PxhL9xN XVrt1Sn+1dG11ZRcIuNkH4/0ZIBqGhs6VyTVwRz5CFYokzTg4M3kkjdwOPfSwcZtVb90bBGPvdO E1INrUkeyt5TT8tB1euLY6sGIA1COvS9tkY1y1WeeIqHthMLfS0Ip2eEHny+qryzYw2E8AvgpsX ypsAMDMq3z/Y/gtW8QIu4z6HhEH7cGd19dSFd
X-TMASE-SNAP-Result: 1.821001.0001-0-1-12:0,22:0,33:0,34:0-0
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/wIPJOM6Vf8xQPi8N5cMK6O79ShQ>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 20 Apr 2019 11:49:41 -0000

Hi Alissa,

Thank you again for your considered thoughts.

I would like to look at one paragraph in your reply:

> The proposal in this draft can also be trivially gamed by a single or
small
> handful of individuals creating a set of 10 email accounts, registering
them
> to participate remotely, and having them join remote sessions. Even if all
> this would result in is a series of recall committees being forced to be
> constituted to deal with recall petitions that get rejected, this could be
a
> significant tax on our community. I think analyzing the countervailing
> benefits of this proposal against this tax or analyzing the costs and
> benefits of doing identity verification to overcome it are important tasks
> that would require the kind of discussion a WG can provide, and also
> require a clear understanding of what the problem statement is.

Pretty much the whole of the IETF consensus process is equally open to such
gaming because all decisions are taken on the mailing list. It might be that
gaining positive consensus is not easily gamed, but objecting to progress
would be easily attacked in this way.

Yet I can only recall two attempts to introduce "sock puppets" to the IETF
consensus process. Both were spotted early and both resulted in minimal
impact on the IETF process. So few attempts in such a long period does not
suggest that this is a major cause for concern.

Additionally, the complete absence of recalls of seated and active
Nomcom-appointed people suggests that either the process remains unlikely to
be executed, or that the current bar to execution is too high to enable the
necessary petitions.

But now (finally?) we can actually debate the content of the draft. The
current revision suggests the following...

   At any time, at least 10 members of the IETF community, may request
   by signed petition (email is acceptable) to the Internet Society
   President the recall of any sitting IAB or IESG member, IETF Trustee
   or IETF LLC Director.  All signatories must have registered to attend
   and have participated physically or remotely at least three out of
   the previous five IETF meetings.

   Each signature must include a full name, email address, and primary
   company or organization affiliation.  No more than two signatories
   may have the same primary affiliation.

   The IETF Secretariat is responsible for confirming that each
   signatory is qualified.  A valid petition must be signed by qualified
   signatories as specified in this section.

I suggest that this means that anyone gaming the system must spend 12 months
doing it (three meetings, well, that is technically eight months and a day)
and that they must go to some trouble to establish identities for their
socks.

As the draft goes on to say

   The risk of
   frivolous recall petitions is mitigated by setting a threshold for
   qualified signatories.

So, perhaps the right question to ask you is, can you suggest a way forward
that would:
- continue the important efforts to increase and enable remote
   participation by sending a message that remote participants
   are strongly valued by the IETF
- increase the protection against the fear of frivolous recall
  petitions without risking the accusation of disenfranchisement
  of or prejudice against remote participants

For your consideration, I would like to offer up part of the discussion that
surrounded the creation of the Ombudsteam. It was suggested that pernicious
or capricious claims of misconduct might be made to the Ombudsteam resulting
in damage to individual's reputation, self-esteem, careers, and
stress-levels. During the discussion of this point it was decided that it
was more important to enable reports of actual incidents than it was to
prevent bogus reports. But it was also decided that the Ombudsteam should
watch very carefully to see whether such false accusations were being made,
and if so to report back so that further changes to the process could be
made.

I would suggest the same ethos applies in this situation. The IESG is in a
good position to work with each Nomcom chair to understand the frequency of
recall petitions and the drain on the community that they cause.
Furthermore, to obtain a view of the balance between successful recalls and
petitions that might be judged frivolous. If the level of mendacious recall
petitions becomes a problem then the IESG could report this to the community
and steps could be taken to further strengthen the protection.

So, my contention is that if a recall petition results in a recall, that was
exceptionally necessary. It is true that we cannot think of a situation
where that would be necessary or desirable, but that is because we have a
good set of people serving on the I*.

I further contend that the desirability and value of a successful recall
outweighs to some extent the harm caused by sock-puppets. There is obviously
a balance, but it does not stand at entirely blocking all risk of frivolous
recall petitions.

Thanks,
Adrian