Skip to main content

Trust, Security, and Privacy

If you want to think about moral concepts that ground debates about privacy, you can't help but think about trust. The basis of a community is the trust that the members extend to one another: the trust that we will leave each other in peace, respect one another as human beings, and (hopefully) look out for one another's welfare. Democratic political institutions rely on citizens' trust that fair and open procedures create just societies. Without the possibility of trust, we lose all society, and all social philosophy.

Trust is also an important concept in security. We employ security out of a lack of trust. We trust the designers of our security and encryption systems. Citizens encrypt their data or web traffic because they do not trust the government. The government resists citizen use of strong encryption because they do not trust the citizens.

It might be easy to conclude that with sufficient trust, we would have no need for security or encryption. I think there are independent reasons to value privacy, so let's no go quite that far. Instead, we might understand the practice of exchanging security credentials as demonstrations of trust. When I present my username paired with my password, I demonstrate that I have trusted access to the account. When a firm hires a new employee and creates security keys and access codes, the new employee is being initiated into a web of trust.

In many cases, we connect trust to identity. A security key demonstrates the identity of the holder, for instance. Certainly, the sense of trust that grounds a community seems connected to recognizing one another as neighbors. Nevertheless, we have a large anonymous community organized around activism, not to mention the mostly anonymous BBS and Usenet communities that formed in the early days of the online world.

The information economy also runs on trust. If users can trust information vendors to protect their private data, users are more likely to enter into the information market. In the US, information vendors have to rely on reputation and user-friendly privacy policies. The results are somewhat mixed, even more so since the PRISM leak. Some users just don't trust Big Data, and established trust can wane due to current events or changing attitudes.

So what do we do about this? Well, stay tuned...

Comments

Popular posts from this blog

RPG Systems: An Analogy with UI Design

The current game in our weekly role-playing group is Deadlands. The previous game was Shadowrun. Both rule systems lie closer to the “chunky” side of the spectrum. Shadowrun has a particular reputation for its complex and somewhat cumbersome rules, and while Deadlands has less overall complexity, the system has a degree of granularity that interrupts play more often than it enhances narration. I enjoy role-playing games because I like participating in a good story. The rules system provides a set of constraints for the characters, the setting, and the conflicts. They help give the narrative structure, a background against which the story will take place. Too few rules, and telling an interesting and well-developed story becomes difficult. Too many rules tend to get in the way of individual scenes or events. With the right balance, it’s possible for the game master, usually me, to be sufficiently fluent in the rules system to resolve any conflict without extended consultation of on

The Incredible Lightness of Collaborative Consumption

Last week, we had to exchange our defective futon frame for a new one. The store didn't want to cover transport cost in either direction, so we had to figure out how to get our re-boxed frame from Mountain View to Los Altos. If we had a car, it would not have been very simple since we were aiming to buy a small sedan, nothing that can easily carry the frame and its box. Fortunately, we have a car sharing service that gives us access to a range of vehicles, including a van stored down the street from my building. After work, I grabbed the van, picked up the frame at our place, and then Tara and I drove to the futon to make the swap. I dropped off Tara and the new frame at our place, and then headed back to campus. On returning the van to its parking space, I hopped on a shuttle back to downtown Mountain View. We were able to do all of this because we're not tied to a specific vehicle for all of our transportation needs. The last car we owned was a van, and it came in handy o

Carless in California

For various reasons, we do not own a car despite living deep in American car country. The reasons are largely financial; the cost of living in downtown Mountain View crowds car ownership out of our budget. We pay more to live in a pedestrian friendly neighborhood, so we are less able to afford a car. At the same time, I don't need a car to get to work, and Tara doesn't drive, so any car we had would sit in the carport most of the week. Combine that waste of resources with a reluctance to contribute to the Bay Area's traffic congestion, and forgoing car ownership doesn't sound all that bad. Car sharing services allow us to grab a vehicle as long as we plan ahead a bit. The Caltrain provides access to San Francisco. There are convenience stores and cafes in walking distance, so we don't feel the absence of a car too often. Last night was one of the few times where I did. After getting home from work, we wanted a dinner cheaper than nearby delivery options. The n