Greg wrote At 04:33 PM 9/4/2001 -0700, John Young wrote:

Look, I'll accept that we will all succumb to the power of the market, so limit my proposal for full disclosure to those over 30. After that age one should know there is no way to be truly open-minded.

And, in the spirit of full disclosure, I'll mention that at C2Net we did sell our software to the government/intelligence agencies who wanted it - they paid the same prices as any other customers, signed the same sales contracts (we'd negotiate some on warranty terms for big purchases), and otherwise got what everyone else got - not more, not less.

Your honesty is admirable--and unlike certain other cases, I don't have any real reason to doubt what you say. But are you sure you have adequate security and counter-economic espionage measures in place? Have you had anyone do penetration testing lately? How much do you trust the people you work with? Wish I had a nickel for every time some young (or not-so-young)turk at a security conference or elsewhere started blabbing about things they shouldn't have out of nothing more than a desire to seem big and impress me. Feds and hackers alike, same old song and dance. I never even try to elicit information, either: I don't know, maybe it's some kind of sexist thing to assume a sweet-faced polite young woman could ever be a security threat. The sick thing is, if I were really evil I could have made a lot more than a nickel... Depressing. Wake up and shut up, dumbasses. Back to the insider problem: It's not exclusively a moral issue--whether you think you have more to fear from Uncle Sam, China, or the competitor down the street, everyone can agree that employees who sell out your technology to those out to compromise it are bad news. And frankly, the very people who wouldn't deal with China in a million years might be the ones most willing to listen to agents peddling the old "in the interests of national security" line. And whereas government agencies have always had a strong "culture of paranoia" that at least gets the issues on the table, private companies are at a disadvantage because they never even saw it coming. With a lot of young tech companies having spent the last few years feeling fat, happy, and oh-so-much smarter than those fusty old feds, you've got a potentially massive disaster in the making. Oh well, here's hoping you never get stung by the insider problem personally. ~Faustine.