Weighing Security I want to look at the thorny questions of security and privacy not from a technological perspective (which I believe is forth coming) but from a user’s point of view. Security/privacy seems to be continuum at best, where there is no such thing as a purely safe/private mode of communication. Some people may argue that, but I feel confident any deployment of a model like March-Hare incurs some considerations around these issues especially in repressive regimes or in environments that can put people in jeopardy.

With security/privacy we seem to be talking about risk. We all know most things in life carry proportional risks. For example getting in a car is a well studied risk with decades of numbers and statistics to keep one reading for quite some time. That being said most people base risk on benefit. What is the risk, as I see it now, compared to what benefit I may enjoy. The good news is humans are pretty good at making these decisions when given information. Do they make perfect rational decisions, no of course not. Though considering the huge number of risk decisions that are made, the most end up not putting people in jeopardy. Here are some things users or potential users should consider. What am I saying in this medium. This should go for the use of any communication medium from the radio to talking at a bar with friends. What do I know about these people? The less I know who I am communicating with the greater care I should take in what I am saying. Misunderstandings, things out of context and so can easily occur with people I don’t know. In a model like M-H there is no reason for people to talk about things they wouldn’t feel free sharing with a stranger. Privacy is very important for many people. There are ways to further promote privacy like buying anonymous cell-phones. There is a cost (in money and convenience) to this of course and it must be weighed against your need/desire for privacy. This is dependent on every person but should be thought about before the time you need to decide. To complicate matters we must also think about the needs for security and privacy of others. We should assume that others desire a high degree of both, especially if we do not know them. This is ethical and will engender a greater sense of solidarity with people you are working in concert with. It might be a pain to clear all your logs, contacts, delete messages and so on but this is right thing to do. There is no reason you should be careless with other’s privacy concerns. March-Hare (as should all those providing aid to others) should seek the maximum security/privacy for those using its tools. This can be best done by being transparent, disclosing the realistic risks of using the tools, and providing education and when possible alternatives for ensuring greater privacy. March-Hare needs to develop a position and announce it in regards to what they are willing and not willing to do to ensure the privacy of those using their tools. This information is key to allowing people to make informed and individual choices regarding privacy/security concerns. As part of this mission, M-H should provide up-to-date information these issues as best as they know it and users must take personal responsibility in seeking out independent resources that address their concerns. It is sad we cannot live in a truly world where are conversations are private and secure but knowing that there is always some risk should not frighten us. We only need to think about our needs, think about what we can do to ensure our privacy needs and the needs of others and work from an ethical position. Users or potential users should feel free to ask M-H to address their concerns and demand transparency about these issues.