During the 1970s, there was a big push to hold corporations accountable for crimes they committed. Resistance to the idea came from people who thought that any crime would be committed by specific individuals, and that those individuals, not the corporation, should be held accountable.

Activists pushing for direct criminal sanctions against corporations pointed out that the obvious tactical response by the corporations to a policy of only holding individuals accountable would be to hire a “vice president in charge of going to jail.” That person could be put in charge of whatever activities might end up being found to be illegal—and be compensated appropriately for the extra risk he was taking. (How much would they have to pay you to take a 3% chance that you might have to spend 2 to 5 years in a minimum-security prison? One hundred thousand dollars a year? A million? Ten million? Many people have their price, and it tends to be surprisingly low, at least for risks perceived as being fairly low.)

I was reminded of this in the wake of Marissa Mayer’s statements that Yahoo and other corporations were unable to reveal that they were caving in to US government pressure to turn over customer data, because they’d go to jail if they did.

What those corporations needed was a VP in charge of going to jail: Someone hired specifically to speak out if the company receives a National Security Letter—and appropriately compensated for the risk that they might have to go to jail.

Sadly, it’s tough to get the incentives right. The corporations that the 1970s activists were concerned about were engaged in things like illegal waste disposal. Their “VP in charge of going to jail” had two goals—dump the waste as cheaply as possible, while making the activity look like it might be legal. As long as it was close enough to being legal to avoid going to jail, all that extra compensation was free money—but if looking like they might be following the law wasn’t a lot cheaper than actually following the law, the board was going to figure that there was no point in employing the expensive VP.

In the case of being the VP in charge of going to jail for revealing that the company had received a National Security Letter, the extra compensation would be received in advance, when the VP wasn’t even doing anything illegal. It would be awfully tempting to pocket all that money—and then when the National Security Letter came, to say, “You know, upon reflection, I think in this case my conscience requires me to follow the law and keep quiet.”

I’ve tried to come up with some mechanism to get the incentives right. Maybe paying the extra money into a trust that pays out promptly if the VP goes to jail, but otherwise only after many years, when there’s reason to believe that there was no National Security Letter—and of course, if it turns out there was a National Security Letter and the VP didn’t speak up, the money goes to charity instead. But that has too many problems with being unenforceable due to being contrary to public policy.

It’s too bad. A VP in charge of going to jail seemed like a perfect solution.

I’ve always admired the way reporters come together when a reporter is messed with. It reminds me of the way the police engage in a big show of force when a policeman is killed.

Once when running a quick errand, I found that I’d put myself on the other side of an hour-long police funeral procession. It did not endear the police to me, but it did make a powerful statement that the police are not just willing to make people suffer when a policeman is killed, they want to make everyone suffer. They think it gets the incentives right. They think if everyone suffers just a little bit when a policeman is killed, everyone will have just a little bit more interest in keeping that from happening.

I think that sort of tactic is ill-advised—almost all people are much more strongly motivated by decency and compassion than they are by intimidation. But I understand that the police are motivated more by grief than by thinking a show of force will make a difference. Their legitimate feelings make it hard to argue with their tactic, even when its results will be mixed.

Reporters are better at being circumspect and targeted with their reaction, but when anybody within the power structure messes with a reporter, a vast swath of the journalistic community sits up and takes notice. They write stuff about what happened. They point out governmental overreach. They remind one another that they’re all on the line if this goes unchallenged—and they remind ordinary people that the same powers being used against reporters are available to be used against ordinary people.

It’s really good to see. It’s not perfectly effective, but it is effective.

It’s the right response.

I’ve been very disappointed by many friends’ cavalier attitude toward both our government’s invasions of our privacy and its use of the most extreme forces of legal process against those who would tell us the truth about what the government has been doing.

One specific disappointment has been the various versions of “I don’t care if the government listens to my calls. I’ve got nothing to hide.” (Usually with some lame joke about how tedious it would be to listen to their conversations.) It’s as if they know nothing about what led to the American revolution. Didn’t these people go to high school? Don’t they know that each of the privacy-related rights spelled out in the constitution was there for good and specific reasons—because of actual abuses suffered by ordinary people?

The most disturbing of the recent revelations is not how much data that they’re sweeping up (pretty much everything) nor the incredibly lax standards they seem to have about exposing the data (my data and their own!) to a surprisingly large number of people. It’s that they’re sweeping up everything and then keeping it for years.

There are several problems here, but I want to focus on two of them.

It’s not okay just because it’s still secret

At one level, I understand people who trust the government enough to think that it’s okay (or at least less bad) to have the government sweeping up all their private information—as opposed to, let’s say, Google or Facebook or Microsoft (or Monsanto or ADM) doing it. I can accept the ideal of government as a force for good. We’re still reasonably close to having a functional democracy—a few tweaks to campaign finance law and we might very well get back a government that was responsive to the desires of its citizens.

But even if you trust the government not to use your information inappropriately, I think recent events prove that you can’t trust them to keep it secret. We’ve just seen a large leak of exactly the information that the government has been trying it’s very hardest to keep secret. But we only know about it because a brave leaker went public and because a free press published what they’d learned. How many leaks were not to the public, but instead to a foreign government or a criminal organization? We don’t know, because those leaks go unreported. We can’t know. Even the government doesn’t know, and if it did know it wouldn’t tell us.

If the government can’t keep the details of its own most secret programs from becoming public, why would you imagine that it could keep your details secret? For all you know, your information has already been leaked to criminal organizations, to foreign governments, to domestic corporations, to lobbying organizations and other influence peddlers—to anybody who could get an advantage by knowing secrets.

Maybe massive amounts of your information collected by the NSA have already leaked. The next time there’s an unauthorized charge on your credit card, maybe it’s because the NSA leaked your credit card number.

And of course that would just be true information about you. Maybe there’s a bunch of false information about you in the giant NSA databases. The next time you get turned down for a credit card or insurance or a job, maybe it’s because false information about you leaked to people who used it to make a decision about it.

And here is where we get back to why the idea that “I’ve got nothing to hide” is such a terrible idea.

It’s not okay just because you have nothing to hide

One friend made a short list of every “crime” he could remember having committed—a couple of youthful indiscretions, a couple of protests, a couple of harmless acts that were circumstantially appropriate but perhaps violations of some code or another. He was willing to own up to those—”If you want to prosecute me, go ahead!”

But, of course, that’s not how it works. The federal government doesn’t care about such things—or, at least, it doesn’t care until you become a “person of interest” in some other matter.

I don’t know whether my friend has committed any other federal crimes or not. But I do know that he has crossed international borders several times in the last few years. Did he fill out the requisite paperwork correctly each time? Did he carry anything across the border that he shouldn’t have, such as an agricultural product? Did he declare in the section on agricultural contacts that one of his running paths was also frequented by feral pigs? Is he sure that none of his financial dealings falls under the ambit of any federal laws?

In the real world, the federal government goes out and checks these sorts of things if they suspect you of something. Worse, they go and check these things if they suspect one of your friends of something (because it gives them leverage to get you to incriminate your friend). But now they’re going to have another whole bunch of things to check—all your phone calls and emails for the past 5 years.

And don’t forget that it’s trivially easy to convict you of conspiracy. All it takes is a single “overt act,” such as lending a friend bus fare or taking in his mail when he’d on vacation. (Well, technically it also takes an agreement and criminal intent, but apparently it’s okay if the only person in the conspiracy with those is the FBI informant.)

Don’t imagine that you’ve “done nothing wrong” just because you’re not aware of it. Unless you’re a federal prosecutor or defense attorney, you have no idea the vast array of actions that turn out to be federal crimes. One of our biggest protections has been that it’s a lot of effort to investigate and look for those crimes. If all your phone calls and emails are recorded it’s going to be a lot less effort.

As I say, I don’t dismiss out of hand the idea that the government is overall a force for good. I think our government (at all levels) has been pretty effective these last 150 years or so in reducing all sorts of bad things—there’s less poverty, there’s less casual violence, there’s less abuse of vulnerable people. But I don’t think giving the government audio recordings of all our phone calls, the texts of all our emails, or lists of every web page we visit will be much help in those things. And I think it will do real harm in those (fairly rare, but not rare enough) instances when people acting under color of law decide that somebody must be guilty of something, and make use of these new tools to prove it.

I had the great good fortune to learn early on that anything posted to the internet is there forever. That knowledge has guided my internet activities for twenty-five years now, and keeping it perpetually in mind has stood me good stead so far. My basic rule is simple: I don’t post anything to the internet unless I’m intending to publish it to the world at large.

So, I’m happy to post the articles and stories I write, and happy to post links to them. That information is deliberately made public. I also post about things I do (and share links to things other people write), but only with the knowledge that each such post is part of my permanent public persona.

The exceptions (commercial, banking, credit card, insurance, and medical sites) are carefully considered, minimized as best I can, and monitored so that I have some hope of detecting and limiting the harm from failures. I expect the information that I share with them will remain private—but I use the word “expect” in much the same way an eighth-grade teacher might use it when telling her students “I expect each one of you will be well-behaved during our field trip.”

Because of this perspective, I pay very little attention to the “privacy” settings of social media sites. Whatever I post is intended to be public, so it makes no sense to constrain it. I do try to keep a grip on things that I don’t intend to be public. For example, I only attach location information to my posts on a case-by-case basis.

As I say, this has stood me in good stead up to this point. But, as Bruce Schneier points out, we’re already well past the inflection point between a past when such efforts mattered and a present and future where they do not. I carry my phone with me most of the time, so my location is already known to a third party—which means that, as a practical matter, it can be known to anybody who cares enough to get the information. Cameras are nearly ubiquitous—even before drones make it possible for them to be actually ubiquitous (and social media sites have already gathered ample data to support any facial recognition effort).

Anybody who’s working on the public policy aspects of these issues who’s not familiar with David Brin’s Transparent Society work is making a mistake. Privacy has no future. It hasn’t for a long time. Transparency is our best hope for keeping this fact from making the unequal power relationships in society much worse.

[Update 22 May 2011: I found the post from 2003 where I tell the story of just how I learned this lesson, back in 1990.]

Security expert Bruce Schneier wrote last week about some changes he was making to his blog to remove some anti-security features. Reading over his list of changes, I was pleased to see that I’d mostly avoided adding anti-security features to my blog in the first place.

  • No offsite tracking. Although I’ve experimented with them a couple of times, I don’t have “like” or “share” buttons on my blog posts, so your visits here are not automatically transparent to Facebook, Twitter, Google, or other social media sites. It means you’ll have to copy the link yourself if you want to share my posts. I’d be delighted if you did, so I hope that’s not too onerous.
  • No offsite searching. Similarly, the site’s search facility runs right on the site itself, just doing an SQL query of the database that holds the content of my site. Doing a search here doesn’t expose your query to anyone else. (I once looked to see if I was logging queries and couldn’t find them; as far as I know, doing a search here doesn’t even expose your query to me.)
  • No offsite feed. I also run the RSS feed for the site right on the site, and always have. I thought for a while that I ought to use feedburner, but I never got around to it, and now it’s clear that laziness led me to the right choice.

Any attempt to keep internet activity private is probably hopeless, but that’s no reason not to try.

I think I know why it has been so difficult to pass any sort of significant gun control legislation in the United States.

Most democracies in the world have gun control laws, which serves as an existence proof that it is possible, and yet in the US gun control has been very much a matter of x steps forward, y steps back (with what you see as the values for x and y very much depending on your political position).

You can point to “historical reasons” or “cultural reasons” for our unique situation, and you’d certainly be right, but I don’t think that serves as much of a guide to anyone who wants change (in either direction). Instead, whether you advocate or oppose gun control, think for a minute what it means to have gun control—or any kind of government control—in a democracy.

In a democracy, you’re going to end up with laws that are (to a first approximation) supported by a majority of the people. In fact, in the sort of representative democracy we have in the US, it’s very hard to get any substantive change in the law unless it’s supported by substantially more than a bare majority, because it’s so easy for a determined minority to delay or block changes.

What that says to me is that, in a democracy, changing the law has to begin with changing people’s opinions.

Trying to do things the other way around—by pushing for legislation in advance of majority support—leads to exactly what we’ve seen these past few decades:

  1. Laws that are ineffectual, because they are loaded up with compromises needed to cobble together a majority in the legislature.
  2. A stiffening of opposition to the legislation, because opponents feel their viewpoint has been ignored.

If you want to get something like this done, your best bet is to follow the model provided by Mothers Against Drunk Driving. They wanted stiffer penalties and lower blood-alcohol limits, but their efforts in the legislator were initially quite ineffective. Where they were first influential was in changing public opinion.

In the early 1960s, drunk driving was something to be laughed at. Many a comedy bit was created around taking some guy so drunk he couldn’t stand up, pouring him into his car, and sending him off weaving down the road. They were funny. Watch those same sketches now and they’re appalling.

Once public opinion was changed, changing the laws was easy—because we live in a democracy.

There’s a second reason public opinion needs to change first: The police are  unable to enforce laws that aren’t broadly supported, except through police-state tactics.

If you have broad support—not just a majority, but a general consensus across society—then it’s easy to enforce laws. Few people break them. When they are broken, witness come forward to report the crimes. When people are prosecuted, juries convict and judges impose sentences as prescribed by law.

How would you enforce a gun law that was opposed by half the population?

It would be easy enough to enforce a law against open carry of a firearm, but enforcing a law against concealed carry would require the police to stop and frisk people on the street. (Of course, this happens already in certain neighborhoods. People who live in those neighborhoods are properly outraged, as are those who believe in freedom. But let it start happening in neighborhoods full of middle-class people—neighborhoods full of voters—and the laws would get changed back very quickly indeed. At least, I hope they would.)

It would be even harder to enforce a law against owning a firearm in your home. Even in the sorts of neighborhoods where people are routinely stopped and frisked, the police are not yet so bold as to enter and search people’s homes. But without that step, illegal guns would linger for decades. Indeed, for generations. And with that step, I suspect we’d see the law changed back very quickly: Many of the same people who support gun control would still object to the police-state tactics that would be necessary to impose a ban on guns.

And, lest I be accused of arguing against a straw man, on the grounds that “no one” is arguing for a ban (just reasonable regulation), I’d like to point out that the enforcement problem is the same.

I suppose the intermediate step that gun control advocates anticipate would be laws that regulate gun ownership, but with enforcement happening only when guns are discovered incidentally: If your house is searched for some other reason, then your illegal guns will be found and their presence will be used to pile on additional penalties. I most particularly object to that scenario, just as I object to all scenarios where ordinary people are required to keep their papers in order or face harsh penalties.

My main point here, though, is that seeking changes in the laws should always be a second step. First, seek a consensus in society that things should be different. Do that and it’s easy to change the law and easy to enforce it.

US Postal Service Eid stamp

We stopped at the post office on the way home from taiji to mail off our Christmas gifts, and Jackie wanted to buy some stamps as well. The clerk pointed us toward the display of the currently available stamps, pointing out that the Christmas-themed stamps were in the lower left.

Jackie peered at the stamps, her hand hovering over the ones she was looking at, and when her hand strayed away from the Christmas stamps to a spot over the Eid stamps just to the right, the postal clerk said, “You wouldn’t want those.”

My first impulse was to laugh out loud. Jackie said, “I don’t know. I think they’re kind of pretty.”

I’m sure the clerk was just trying to be helpful. She was no doubt thinking back to a day, perhaps not so long ago, when she would have had no idea what Eid was. She was imagining just how embarrassed she’d have been if she’d thought, “I don’t know, I think they’re kind of pretty,” and had sent off her Christmas cards with Eid stamps.

Jackie, of course, knows perfectly well what she’d be doing. She’s lived places where Eid is as big a holiday as Christmas is here. And nobody that we’d be likely to send a card to would be offended by receiving one with an Eid stamp.

I momentarily considered whether I should be offended at the idea of a US government employee steering people away from stamps on the grounds of religious belief, but it was so funny I couldn’t work up any indignation. It’s not like the clerk was trying to keep us from celebrating Eid. She was trying to help a couple of small-town folks avoid committing the terrible faux pas of unknowingly sending Christmas cards with an Eid stamp. I’m sure if couples wearing headscarves and turbans come in, she sells them Eid stamps without comment. (That mental picture has me laughing again.)

After pointing out that the post office really ought to have solstice stamps, Jackie ended up getting a page of Earthscape stamps.

Bonus extremely lame pun: A while back someone posted a bunch of lame puns in the men’s locker room at the Fitness Center. One was “What’s it called when everybody tries to go into the post office at the same time? A stamp-ede!” Knowing that Jackie would have seen the same puns posted in the women’s locker room, when I met her in the lobby I asked, “What’s it called when everybody tries to go into the post office at the same time on the last day of Ramadan? A stamp-Eid Mubarak!”

The problem solved by checking IDs at the polling place—malefactors impersonating voters—very nearly does not exist at all. The “solution,” however, creates three new problems. Specifically it creates the problems of blocking voters from casting their ballots in three instances:

  1. If their papers are not in order.
  2. If a poll judge evaluates their papers incompetently, and erroneously declares them to be not in order.
  3. If a corrupt poll judge competently evaluates their papers, but in an act of criminal malfeasance falsely declares them to be not in order.

The result in each case is a voter being disenfranchised.

Citizens of the United States are not required to keep their papers in order. (Citizens of the United States are not required even to have papers, although it’s enough of a convenience that most people do.)

To the extent that the state has a legitimate interest in making sure that voters meet the qualifications—age, citizenship, residence, and so—those checks should be made at registration time. Doing so neatly avoids all three problems. If additional documentation is required to prove they are qualified to vote, there is time to procure that documentation. And in the case of an incompetent or corrupt poll judge, there is time to appeal to higher authority and have the error corrected.

Checks of this sort should not be made at the polling place, because it creates unnecessary time pressure—any little glitch leads to the voter being disenfranchised. To my mind, disenfranchising a voter is as un-American as insisting that citizens keep their papers in order. Perhaps more so—it strikes at the very heart of democracy.

Half-measures aimed at reducing the problem, such as provisional votes, are unsatisfactory. Voters have the right to cast votes, not provisional votes.

Voter impersonation can be almost entirely prevented simply by checking the signature of the voter against the signature in the registration rolls—a check that can be done without reference to ID cards. This also largely minimizes the threat of corrupt poll judges, because the signature specimen exists, and the judge knows that a false claim that it doesn’t match will be discovered. (Unlike a voter ID scheme, which lends itself to corrupt or incompetent poll judges arguing later about whether this or that ID was presented, or whether it met the criteria spelled out in the law.)

This post was prompted by a discussion I’ve been having on Facebook with a guy who’s worried about an article with this headline: Group says it found 30,000 dead North Carolinians registered to vote.

I responded, pointing out that everyone who’s ever registered is probably still registered, because there’s no central reporting mechanism for working back from death certificates to every address where the deceased might once have registered to vote.

This guy’s response was that all those registrations of people who are dead could be used by malefactors to vote multiple times.

I rather liked my response (the opportunity to quote it here is the main reason I wrote this post):

Sure—but that would be a crime. You could also show up at the polling place with automatic weapons and make everyone stand against the wall while you stuffed in 1000 ballots marked for your preferred candidates.

It’s a pretty easy crime to detect, too—just get a list of death certificates and compare that list to the list of people who voted. And people have gone through that exercise, and discovered that criminals impersonating dead people to cast additional votes is a crime that’s about as common as people showing up with automatic weapons and stuffing the ballot box.

All voter ID laws gain anyone is an opportunity to disenfranchise voters, a terribly un-American goal.

I’ve got a quandary. It’s in the area of civics.

I was on jury duty last month, and was in the pool of potential jurors for a cocaine possession case. Several of the candidate jurors mentioned that they had issues with drug prohibition, and were excused from serving on the jury—whether or not they said they could set their personal feelings aside and follow the law. (I wasn’t taking notes, but my recollection is that the ones who said they didn’t think they could follow the law were excused by the judge while the ones who merely expressed personal reservations about drug prohibition as a matter of public policy had to be peremptorily challenged by the prosecutor.)

I too think that drug prohibition is terrible public policy. It’s harmful to society at every level. It corrupts the police and the judicial system. It clogs the courts and the prisons. It drains money that could be better spent on useful things (or left in the hands of the people who earn it). It adds yet another layer of harm onto drug users—people who are already suffering—making it harder, riskier, and more expensive for them to either go on using drugs or seek help to quit.

Most especially, criminalizing commerce in drugs means that makers and sellers of drugs have no recourse to the police or the courts when they’re robbed or defrauded. That produces another whole layer of violence—one that only occasionally touches people who aren’t buying or selling (or stealing) drugs, but that would be completely absent if drugs were legal.

Despite all that, as I imagined my answers to the questions they were asking, I found that I was inclined to say that I could give both sides a fair trial—meaning that I thought, if the prosecution proved beyond a reasonable doubt that the defendant was in possession of some amount of cocaine, I could vote to find him guilty.

I thought about why, and eventually decided it was because I think democracy is important.

I’ve got no doubt that drug prohibition is a dumb idea, but I’ve also got no doubt that the right way to fix it is by changing the law. I’m pretty sure that screwing around on the edges of the law, such as by acquitting people who are technically guilty, is the wrong way to solve the problem. And yet, each time someone like me applies the law, another person who already has more than his or her measure of problems gets another few—a felony conviction,  loss of access to things like public housing and school loans, and most likely a prison sentence.

And so my quandary. Is democracy worth that much? It’s worth a lot, but is it worth wreaking that much harm on someone who was merely self-medicating because they hadn’t found a better way to deal with life?

I find I’m not sure.

I’ve got a guest post up at Asta Lander’s blog Simply Living, about the trade-offs that people make when they choose to work for wages or a salary, and how you can get most of the benefits while avoiding most of the downside.

It’s called Choosing Freedom.

There was a time when most people were self-sufficient. They acquired what they needed through some mix of hunting, gathering, fishing, farming, raising animals, and making things themselves. Not many people do that any more.