Comments on: Coleman Exposed Database: A Study in Ethics http://blog.beckitrue.com/http:/blog.beckitrue.com/2009/03/13/coleman-exposed-database-a-study-in-ethics/ Developing Superior Technology Leaders Thu, 04 Aug 2011 03:48:59 +0000 hourly 1 http://wordpress.org/?v= By: becki http://blog.beckitrue.com/http:/blog.beckitrue.com/2009/03/13/coleman-exposed-database-a-study-in-ethics/comment-page-1/#comment-5 becki Sat, 14 Mar 2009 20:17:48 +0000 http://blog.beckitrue.com/?p=159#comment-5 Branding, Thank you for you reasoned comment. I appreciate a respectful discussion on this very interesting, and important topic. I agree with you that the Coleman people mis-handled the situation on their end. I am not supporting what the Coleman people did at all. My lack of comment on the Coleman people's actions should not be taken to be an endorsement of them. However, that is a separate issue from the one I addressed in my post and in my comment on Adria Richards' blog. I can appreciate the delicate situation in which Ms. Richards found herself once she saw the site's directory listing including the database file. She was in dangerous territory even if she had been on a site that was owned by a non-politician. This is a great example of why it is important for technology professionals to recognize and understand these issues so they can act ethically. That is what motivated me to write the post on it. There are several organizations that can help people learn more on these topics. The (ISC)2, ISACA, SANS, and EC-Council all have good resources to help people advance their knowledge in this field. Those interested in a degree on Information Assurance can do an online search for colleges. As a current MSIA student at Norwich University, I do recommend them to anyone interested in that route. Regardless of what happens in the short term, I think this situation will be studied as an example of what not to do on multiple fronts. Branding,

Thank you for you reasoned comment. I appreciate a respectful discussion on this very interesting, and important topic.

I agree with you that the Coleman people mis-handled the situation on their end. I am not supporting what the Coleman people did at all. My lack of comment on the Coleman people’s actions should not be taken to be an endorsement of them. However, that is a separate issue from the one I addressed in my post and in my comment on Adria Richards’ blog.

I can appreciate the delicate situation in which Ms. Richards found herself once she saw the site’s directory listing including the database file. She was in dangerous territory even if she had been on a site that was owned by a non-politician. This is a great example of why it is important for technology professionals to recognize and understand these issues so they can act ethically. That is what motivated me to write the post on it.

There are several organizations that can help people learn more on these topics. The (ISC)2, ISACA, SANS, and EC-Council all have good resources to help people advance their knowledge in this field. Those interested in a degree on Information Assurance can do an online search for colleges. As a current MSIA student at Norwich University, I do recommend them to anyone interested in that route.

Regardless of what happens in the short term, I think this situation will be studied as an example of what not to do on multiple fronts.

]]> By: branding247 http://blog.beckitrue.com/http:/blog.beckitrue.com/2009/03/13/coleman-exposed-database-a-study-in-ethics/comment-page-1/#comment-4 branding247 Sat, 14 Mar 2009 13:56:30 +0000 http://blog.beckitrue.com/?p=159#comment-4 I think by her definition of why she did not notify the site was clear. What I find more disturbing is the timeline of the site notification that they were hacked. They were not hacked and she discovered the site situation AFTER they said they were hacked. It's clear you know little about the situation, but, yes, she could have notified them, but considering the options, we would have chosen the same route because if they have already accused "liberal" hackers...when in fact there were no hackers, then she stood to lose more by notifiying them and having them accuse her of hacking. I would protect myself, before anything, especially with a political site. I think by her definition of why she did not notify the site was clear. What I find more disturbing is the timeline of the site notification that they were hacked. They were not hacked and she discovered the site situation AFTER they said they were hacked. It’s clear you know little about the situation, but, yes, she could have notified them, but considering the options, we would have chosen the same route because if they have already accused “liberal” hackers…when in fact there were no hackers, then she stood to lose more by notifiying them and having them accuse her of hacking.

I would protect myself, before anything, especially with a political site.

]]>