[PLUG] The lion in Salem

[david pool]

Dylan Reinhardt wrote:

> Seriously?  OK...

Yes, seriously. Thanks for laying it all out, that took some work. I 
moved your commentary next to the original quote so I could respond below.



> Your PLUG post of Aug 26, 07:46
> -----------------------------------
> Perhaps the state of Oregon would be one of our first clients. Maybe the
> Speaker of the House herself would want to know just how much the
> pirated software in her office alone is worth in fines (not to mention 
> the embarassment... which is priceless).
 >
 > You describe the state as a potential client and go on to strongly imply
 > that disclosure of embarrassing information might advance your cause.


Imply the disclosure of embarrassing information might advance my 
cause...of landing the state as a client. By publicly (PLUG) and 
directly saying so to the Speaker via bcc:.

OK. I follow the logic anyway.


 > After conveying this all-but-naked threat to a leader in our government,

Maybe it's the transition to the threat that we're misunderstanding one 
another. I've just asked that the damaging information be discussed 
openly on a publicly archived list-serve. Once that's done, it's done.

My idea of a threat implies an "or else". Like I'd take my new found 
information about how easy it is to crack the entire system and call up 
the speaker and threaten to crash the whole system if she doesn't do 
what I want. (whether that's pass a bill or hire me as a consultant).

I suppose I can't expect you to assume that I'm too morally upstanding 
to do that. But, well, first of all, you don't threaten people publicly 
about making something public. That's where it either doesn't make 
sense, or you're assuming I'm a moron.


 > you proceed to seize upon a mail header as justification to ask for
 > help exposing security lapses and finding damaging information.
> ------
> 
> 
> Your next PLUG post, Aug 26, 08:08:
> -----------------------------------
> I'm curious about how much of the state's e-mail is being served off of
> "lion". Also, is that machine doing anything else (serving up web-pages 
> with IIS perhaps)? Finally, is "lion" fully patched? [snip] Also,
> frankly anything else anyone can legally reveal about the server would
> be interesting. Obviously, if they are running un-registered proprietary
> software, well, that would be worth mentioning.
> ------
> 
>>From your posts, a reasonable person would probably conclude that you
> intended to use this information as leverage to sell the state your
> services.
 >
> Is the personal gain aspect coming into any better focus? 

Well, look, if the state is running their systems in an illegal and 
risky fashion (ie unlicensed and insecure) I may well use that fact to 
try to sell them a better system. I guess the "leverage" part reflects 
the point above about threat.

I can see how you could misread it the first time through. After several 
explicit explainations of my intent, though, you basically either 
believe I've got the best interests of my state in mind or that I'm 
lying and am just a gold-digger who's not bright enough to threaten 
people in private.

Frankly, if the bill had passed the senate, I'd have had a conversation 
with the Speaker's Chief of Staff. I'd have laid out the facts as I see 
them and tried to persuade him via reason.

I've worked with politicians during this campaign and I don't beleive 
threats are an effective way of influencing them. Sometimes you can use 
them to get their attention, but a quid pro quo with the speaker is stupid.

I suppose if I've been a little harsh this week, I guess it's because it 
seems like people are implying that I'd publicly threaten a high level 
politician and expect to get somewhere that way. ie that I'm a moron.

I apologize if I've treated people a bit harshly as a result. Thanks to 
all who helped me make it clear that I'm not threatening public 
officials. That kind of ambiguity is dangerous these days. Frankly, for 
all the faults and disagreements, I tell you this, Karen Minnis is a 
hard working servant of the state and I thank her for doing a difficult job.


david