Discussion Locked

Ethics

0 helpful
233 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

There are gray areas, given... But in the wifi thread I have seen some people state, basically:

"If the users are too stupid to know better, I'm taking advantage of them - no problem. In fact, I might even change some settings if I feel like it."

This got me to thinking about what sort of ethics in IT anyone has.

Personally, if you are taking advantage of someone else, I rather feel that you're being unethical. Sure, someone them might not notice you're doing it - some might not care if you told them. But in the wifi instance, I'm sure most people would be upset to find that their neighbors' kids are downloading porn or worse] through the unsecured AP.

But I'm interested in hearing a broader definition that encompasses IT as a whole - something against which all situations can be rated.

Anyone?

233 replies

by jamesrl

Do unto others, as you would have done unto you.

and

a good transaction(sale, contract etc.) has tangible benefit for both sides.

and

Never write something you wouldn't want published in a newspaper.

and

Never do something you would be embarrased to admit in front of your mother.

Are they simplistic? - of course, but they cover quite a few situations.

Ethics in IT should have a grounding in ethics in other areas.

James

by jdclyde

Do to others first what they would do to you?

Everything is legal until you get caught?

How about like said two posts earlier, just be what you concider a good person?

Would you admit to your grandma/boss/total stranger what you have done? If not it is usually a voice in your head saying that it is wrong.

Better heading is "Ethics in LIFE".

by twtrout

I agree completely. It falls into the same category as always telling the truth - you never have to remember what you said the last time you were asked.

by admin

The reductionist may cite the "Golden Rule" solving this issue but the Golden Rule relies on a tricky premise, that everyone would, at the heart, like to be treated the same.

In the real world of different religions and cultural roots deeply changing the end result of many practices, there are in fact a lot of people who would see doing unto others as they would have it be done to them quite differently. For instance would you rather have an electric chair, go scott free or be beheaded as a criminal and how would you treat others to a condemned death? On a smaller scale would you rather be offered alchohol or fruit juice on entering a hosts home- should it be what is good for the host?

In the case of wi-fi the golden rule doesn't work because different people want to be treated differently. Some would want others to grant them access while some would like it denied. Since theyu would grant what they themselves desire, well sometimes it would work and soemtimes it would be disasterous.

Kant tried to solve this by taking any purpose outside the intrisic reward of holding the ethic itself out of the ethic so you could use Kant's Categorical Imperative in which the crux is: "only act on a maxim you would rationally want to apply to everything" or another way to say it would be that if you could universally will that everyone did a thing then it would be ethical, but if not, then it would be unethical.

In the case of wi-fi Kant presents a difficulty as it tends to point one in an all-or-nothing arrangement where either complete free public access or some level of restraint to invade private access would be, perhaps, best. Of course, a lot of people would complain the other side is following a lesser position ethically either way.

Perhaps Aristotle would be the way to go here. The Golden Mean. Don't be taking other people for a free ride or abusing them, but then if you find a hotspot that is open and appears free and you just want to find something on Mapquest quick, well, just appreciate that someone has helped you achieve the connection :)

by apotheon

Never act in a manner that initiates force against another, whether by violence, threat of violence, or fraud. Period.

Once you've got that down, the rest just falls into place.

by jevans2

You raised my level of conscience regarding the Golden Rule. However, I still stongly disagree with the premise posted in WiFi thread. Ethics is an important factor in the fabric of society. The premise of toleration and anything goes (i.e it's legal if you're not caught) is corrosive to society as a whole.

by jessie

I've seen WAY too many people these days, in and out of IT whose general philosophy seems to be "Do unto others BEFORE they do unto you." Or, that big corporations are all screwing you, so it's okay to steal from them.

That just doesn't fit into my upbringing... If it doesn't belong to you, or doesn't have a sign on it that says "FREE" leave it alone. I'm the type who will track down the guy who dropped his wallet and it'll still have ALL his money in it.

by d'solve it

No seriously, I mean you've got have a warped mind as well as be a totally insecure character to take from others what does not belong to you.

If the corporate is indulging in this, it's too bad. Remember what goes up comes down and what goes around comes back too. So soon, the corporates will get shafted and well.... things will then have taken a full 180 degree turn.

But the basic thing is this (and I agree with Jessie here) if it's not your's don't take it. I'll go one step further ... if it's free, step away from it. Nothing is Free in this world and there is no greater satisfaction that working hard to get to your goal or prize or object.

So go ahead and sweat for it... It's healthy. :-)

by thechas

Unfortunately, we are devolving into a uncivilized society where the instant gratification and ends based analysis are the rule.

There was 1 proper post in that whole Wireless LAN thread.
It was pointed out that under Federal law, it is illegal to connect to any open wireless LAN.

"Under the federal Computer Fraud and Abuse Act (18 United States Code ? 1030), such hijacking constitutes unlawful "access," which is the first element of the crime."

No, ethics and the law can be 2 different things.

Still, the first part of IT ethics is to follow Federal, State, and local laws.
Then, the rules of your company.

The people I know who are held up as paragons of ethical behavior have several common traits:

They obey the law.

They respect the rights, opinions and property of others.

They do not search for loopholes in the law or their daily lives.

They will quit their job rather than violate their ethical standards.

For ethical people, any gray areas in their lives or thoughts are very narrow, and tend to mirror the tough ethical challenges of our time.

So, I have to agree with you. Looking at the large number of peers who posted that it is fully acceptable to use any open access point, I have to agree there is a dilemma in personal ethics, at least with those who posted to that thread.

Until I read the post about the Federal law, I felt that the specific situation in that thread was a little bit gray.

Still, it is now clear that it is not ethical to use any WLAN that you are not a member of.

Chas

The edited portion:

For those of you who cannot look 4 posts down and see my further information:

I copied the section in quotes above from a post in the thread that prompted this thread.
I SHOULD have read the actual law first instead of just quoting from another post.

Please check for follow up posts before jumping to conclusions.

Chas

by admin

I would really appreciate it. Does it mean that intentially giving free access is illegal as well?

If it is illegal to connect to any open wireless LAN is it also illegal to provide an open one?

How do you distinguish, say, an intentional public access point that is open from a non-intended one?

Thanks,

:>

by jaqui

a public access point?
how did you mark it as public access?

myself, would name such a point so that it states, public access point.

any non public points would be secured.

by thechas

Looking over the law as written, I do not read into it what the person who posted the quoted comment in the other thread saw.

As I read the law, you must access data on the network that you should not have access to.

Sorry for the misinformation.

http://assembler.law.cornell.edu/uscode/html/uscode18/usc_sec_18_00001030----000-.html

http://www.panix.com/~eck/computer-fraud-act.html

http://www.usdoj.gov/criminal/cybercrime/1030_new.html

http://www.usdoj.gov/criminal/cybercrime/compcrime.html

I still think I read something about limits on accessing WLANs somewhere.

If I find it I will post a link.

Chas

by tonythetiger

Or you could just ask yourself "If someone left their keys in their car, is it OK for you to borrow it without their consent?"

BTW, my HOME wireless network is open. If you want to use it, you're more than welcome. Of course, you'd have to be within half a block or so of my house :^)

by tbeaird

Chas,
First, let me say that I agree that ethics is paramount to what, I, as a Network Admin, do. My job provides me with access to ALL of the companies secrets. And, as I have explained to our President many times, my reputation as an ethical IT person is what makes the trust they have in me possible.

Now, I just finished reading the CFAA section referenced above. And while I'm not a lawyer, as read, I understand that section to apply mostly to any unauthorized access to US Goverment information. However, section (a)(5)(A) seems to apply to accessing a "protected" computer and causing "damage", in aggregate, of at least $5,000. I don't believe that an unsecured WAP could be considered "protected", as seen by the "reasonble man" standard.

Again, I am not a lawyer, but most judges, etc. allow the law to be looked at from the "reasonable man" perspective. In this case, I don't see how this law applies.

Tony

by tbragsda

.
I agree with you. I saw the thread, but didn't read many because I assumed most would be "serves them right". I have been involved in several of these sort of discussions, and my premise has always been, we are given a very large responsibility to act ethically. We don't have a Bar, or NSCC or FAA or anyone looking over our shoulder, but we should have some code of ethics.

Most of my working life has been spent in Financial environments. I have access to loads of information for clients that I must treat with respect, not to mention the employees of the company. How many of us can get at any email in any users box? Lots, right? How many SVP, or Cxx can do the same? Our ability to touch almost any bit of data floating around our networks is the reason that it is a absolute MUST that we behave ethically. When we behave as hacks, we diminish our own profession.

How then to deal with a situation like the "open" WAP? Well the eathical thing to do would be, to the best of our ability, find the owner, inform them of the problem and any additional information we were able to glean, and not use it!

Sounds peachy, but its right.

TBR

by apotheon

If you discover a security hole in a network and attempt to inform the "owners" of that network, you run the risk of being dragged to court. Just looking for open access points might be considered a violation of wiretapping laws, in extreme cases, and if you're sued (taken to civil court) there's no presumption of innocence the way there is in criminal court. The motivation to perform the computer networking equivalent of returning a lost wallet is definitely lacking, the way things run in this world at the moment.

by tbragsda

.
I doubt any co would press charges, or DA prosecute, or judge convict someone trying to help secure a network.

On the otherhand, using a WAP and downloading crap through someones WAP is another story.

Put in another context, lawers are regulary put in situations of knowing of wrongdoing, its their ethical standards to inform when and what they know.

Again, to close, while we operate without a governing body we must develope our own rules of conduct. When we play like we are better, like we know better, and take advandage of situations because we can, we look like childeren. To me, this is larger than a discussion of one unsecured WAP. We do have responsibility to use our knowledge of technology and the private systems we manage or build with some form of a ethics standard.

by admin

between discovering a WAP and entering a network.

An open WAP does not mean that their network is insecure. You could not tell this by "Wardriving" or just accidently coming across one with your XP interface even. To discover a Network security hole means that you have done far more than discovered and open WAP.

You can have an open WAP with a very secure router behind it.

Alternately, any network probing could be illegal.

You can't secure public airwaves really. This is the wrong place to do this no matter what the salesperson says. You can secure the network behind it though.

I believe accessing information broadcast over public RF is different legally than entering a network. Check out the law theChas posted above.

I could of course be wrong and would gladly change my opinion.

Cell phone channels were a landmark example of how to make this work. It is illegal to use the same airspace at all- even reception. This is not at all true of the WAP's being discussed here. They are using public airspace and anyone can recieve the broadcasts they transmit legally and transmit on the same channels. This is not breaking into someone's network- even if IT guys hate it. Of course, breaking into a NETWORK on the WAP would be illegal.

The solution would be IMO, to designate private airspace exactly in the same manner as cell phones to those that want the RF side secure.

by awfernald

For many years, I was in charge of E-Mail systems, and my basic premise was that E-Mail was sacred. Unless someone showed up with a legal search warrant, I wouldn't open up another persons e-mail for any reason at all WITHOUT FIRST CONTACTING that person for permission, and with the limits of what I would be doing.

However, at my last company (I wasn't e-mail admin there), the policy was very liberal in that I knew of many instances where the e-mail admins were going in to people's e-mail to browse it, actually SENDING e-mail as other people, utilizing the user accounts to access other on-line systems/processes (Lotus Notes workflow) to "approve/disapprove/modify" things inside of the workflow process AS ANOTHER PERSON!!!!

At no time did they ever notify anyone else of their inappropriate (and probably illegal) access, and in fact, I believe they committed fraud in many cases, since some of the processes they were "facilitating", were financial requests, purchase orders, etc....

I finally installed in my mailbox a system which would automatically generate (on the server) an e-mail every time my mailbox was opened UNLESS it was opened on my computer at home or at the office. The e-mails generated went to my internet e-mail address. I shouldn't have gotten any e-mails at all, however, I would actually get e-mails throughout the day, stating that "I" had accessed my e-mail from station with IP xxx.xxx.xxx.xxx, which belonged TO THE ADMINS, not to myself.

However, my boss (the boss of the admins as well), just sort of shrugged it off and said that the e-mail policy allowed this to happen.

by jdclyde

Were they snooping on the phones as well? who knows.

I just know that I would be hand delivering a lot of memos if I thought someone was going through my e-mails on a regular basis. While there isn't anything in there to worry about, it is the princible involved.

by jaqui

would it be ethical, to use a wireless access to find local home based wireless access points that are not secured, find who owns, where they are, and then contact them to point out that thier access point is publicly available?

one of my neighbors has been getting online, doing major amounts of downloading, through unlocked wireless connections from neighboring buildings. he was actually bragging about doing so, and locking one point by changing admin password / login so he can't be cut off.

definately illegal activity.

by apotheon

If you aren't specifically contracted by someone to do a security audit, you might get sued for identifying unsecured wireless access points, even if your purpose is benign. It's too easy to get sued for being a "good Samaritan".

I'm not sure, but in some cases you might even be prosecutable under federal wiretapping laws for that sort of thing. I'd recommend not doing it.

by house

I'll openly admit that I've got a bad habit of responding to security issues by checking it out myself. Eventhough I have no malicious intent, I should try to curve that curiousity... I will eventually get in trouble. There are proper channels to go through in regards to testing security. It needs to be authorized by the proper authorities, but still remain somewhat hush-hush. A difficult task indeed.

by awfernald

As long as you haven't done damages they can prove, screw em.

If they don't have the common sense or the intelligence to secure their ports (takes what, 15 secs to do when you are installing?), then someone needs to help them and let them know just how tight their security isn't.

After all, if they sue you, my first defense would be, I didn't know whose network it was, and/or that it was not to be used for public access since it was a) open, b) not secured, c) no warning. A prudent company would fix any of those 3.

Of course, maybe the stockholders/partners in the company are going to love hearing about the hackers who got in through that same access point and did x millions of dollars worth of data destruction, etc.....

by admin

However, if I knew my neighbor was being taken advantage of I would pass it on to them whether it was a computer issue or someone was setting up a massive party in their yard while they were on vacation...

by hal 9000

If the person was involved in some illegal activity the company or home owner with the open WAP would wear the blame as they would be unaware of who was responsible.

But none the less a good point even if the person isn't downloading something really nasty they are still stealing as someone is paying for all the stuff being downloading. But if for argument sake they download a lot of Kiddy Porn and the action was traced to the Wireless point who would be dragged before the courts for this?

Col

by jaqui

to let people living in five towers know that they are being stolen from?

specially the person who has the wap that has been locked against them changing anything?

by plumley9

I work at a health center and take ethics from the root (principle in Hippocrate's Oath) "First, Do No Harm."
Morality, slippery slope that it is, requires a structure outside the individual and must be learned. Parents spend the first two years of a child's life convincing them they are the center of the universe. The parents then have 16 years to convince otherwise. When they fail, society pays the costs until the child actually grows up and accepts the concept that others matter.
Leagality is worst of all. A structure for dealing with the amoral, unethical children who demand adult rights to protect their bad behavior. Laws, like pickles or sausage, should observed in the making at a distance. You find the most effective quibblers of all, trading your rights or my rights against the 'good of all'. We are often being sold to one lobby or another for money to run to get re-elected.
IMHO it is a matter of personal responsibility, First do no harm and then help all you can.

by packratt

Do no harm, is that an attainable goal?

If one does no harm, one must then abide by the rule of equal opposition and "do only good".

I do think that such a moral code is something people should strive for though, mind you, but resides at a hieght which is not quite obtainable.

I personally abide by the principle of "do the least harm".

Of course, some may argue with me, but I do also believe that such principles must also be followed to the logical conclusion... "Do the most good".

While a system of codes and laws may not follow the principle of "do no harm, do only good", they can square with the principle of "do the least harm/do the most good" when one also considers, and as verified by some who have posted here already, that adherence to such principles is not even close to 100% of the population and there are even some who follow the sociopathic principle of "do whatever harm you wish so long as it gets you what you want".

Thus, there must be some ethical way of dealing with such sociopathic antiethical behaviours. While those who follow "do no harm" are forced to do nothing in response to activities that would harm them, those who believe that they should do the least harm/most good have an obligation to protect themselves and others from such agents of malevolent intent. In order to respond in an ethical manner there needs to be agreed upon equitable responses to said harmfull behaviors. Thus are laws and legality born.

In utopia one needs no laws, unfortunately mankind is far from socially evolved enough to reside in such a place.

by tonythetiger

"Parents spend the first two years of a child's life convincing them they are the center of the universe. The parents then have 16 years to convince otherwise."

For the first two years you try to get them to walk and talk, and for the next 16 you try to get them to sit down and shut up :^)

by tonythetiger

I think intent is probably paramount to all ethical determinations. "Did you intend... and if so, WHY did you...?"

by tony hopkinson

the capability to be really unethical, I've always gone for being visibly ethical in my professional life at least.

Three rules I'm religious about though.
Don't cheat your customers, they are paying.
Don't cheat your friends, they won't forgive you.
Don't cheat yourself, it's stupid.

As for the wireless,that's a sort of asumption of competency for me. If I can access somesone's corporate lan, I assume it was intentional, my next door neighbours, I'd go tell him.

by apotheon

There have been instances in the news of people reporting flaws in software and security holes in networks that got sued and/or prosecuted. I wish I had some links handy for you to point it out, but at the moment I'm sort of at a loss for what search string to use at Google. to find examples.

I don't know whether anyone being so sued and/or prosecuted has lost the case, but I do know that just getting dragged to court, win or lose, can have a significant negative effect on someone's life. It's the opposite of "It was an honor just being nominated." Even without much chance of losing your case, it provides a fairly effective demotivation for someone that would otherwise act (with the best of intentions) as unpaid security auditors for corporations.

Oh, wait, there's the very obvious example of Randal L. Schwartz. He's a highly respected programmer (particularly well-known in the Perl developer community) and teacher of computer-related skills. He co-authored several of the best-known programming texts out there, including most of the O'Reilly line of Perl books (yes, including the infamous Camel and Llama books, among a great many others). If you want more information about him, I'm sure you can find him at a great many online communities where he's active, including blogging and programming communities.

In brief, Randal Schwartz was working for Intel as a contractor. He was prosecuted for a number of activities including both things he was doing in the course of his duties and things he did specifically to demonstrate some security flaws at Intel that he discovered in the course of his duties there. Nothing he did was intended to do any harm to Intel, and none of it actually did any harm, but Oregon computer crime laws had him convicted and sentenced to 480 hours community service, five years probation, 90 days jail time (first deferred then, after a not quite successful appeal, suspended), and $68,000 in "restitution" to Intel. His legal fees have been in the range of at least $170,000. This is a guy whose writings have probably been read by the people responsible for ninety percent or more of the World Wide Web. He's a knowledgeable and respected professional, a nice guy, a consummate expert, and a good Samaritan that was trying to help the company for which he was working who ended up facing jail time instead. He's now a felon, according to our government.

He's the canonical example of how being a good Samaritan in the IT industry can potentially ruin your life. He's managed to get by, to drag himself back up from the pit into which he'd been dropped, but he shouldn't have had to do that.

I'm sure you can find more information on the case by plugging search strings like "randal schwartz intel crime" (without quotes) into Google.

by tbragsda

.
The cases I know of, the person doing the "good ethical thing" were doing it very publicly. That is a much different case.

I don't want to be short, but just don't have much time this AM. I will look for some cases. My guess is I can find many that were more grandstanding by the IT pro, and in my view of the situation, rightley targeted for suit.

The idea I am trying to, in my morning slopy brain, to put out is, if I say "see world, I have found a flaw. Look... this is how you exploite it." is as or more unethical as just using it yourself.

by awfernald

Well, I haven't read this thread except for the first comment, however, I figure I'll step on some peoples toes big time, then they'll admit (under their breath of course), that I'm probably right for most people (though not for them, of course).

With the way that people treat other people in the office (office politics), I don't see how most people that I have worked with could ever even start to talk about ethics.

Of course, there are ethics BETWEEN companies (to the extent that ethics can be enforced by law), however, with the experiences I've had/seen, I would have to say that ethics is about the lowest priority on most peoples plate, UNTIL it comes time to talk about it, then everyone should be up front and honest, etc.....

Look at what the discussion on these forums... how many people have stated things such as, "It's sometimes better for the clients not to know how we do this", or "what do you do when your boss tells you to do something that you know is wrong?" and a lot of people answer with "just do it, and if you get caught, make sure you have it documented so that you don't get in trouble for it."

Ethics is (according to Webster.com): "the discipline dealing with what is good and bad and with moral duty and obligation."

As soon as you start using the "we have to do this to CYA", or "go with the flow", then we have diverged from the ethical way, which means doing what is good based upon our moral duty and obligation.

You sign up for a company, do what is best for the company. Take pride in your work, do right, and you'll eventually get fired/laid off for not being politically correct, and for stepping on toes of the people who want you to do something which is not exactly in the best interest of the company, but rather for themselves.

For all of you who don't think I'm talking about you, simply think about it.... Have you ever said something like "I have to do this so that so-and-so doesn't have any ammunition against me". If so, evaluate whether you did that action for yourself, or because it was your duty to do good for the company.

just my 2 cp worth.

by apotheon

About 98% of people are exactly like that, I think.

Keep in mind, though, that the percentages are probably quite different in threads about ethics. The people who don't care about ethical issues aren't as motivated to visit these threads, for one thing. It's still true, though, that a lot of people professing to be ethical and morally upright are, when the chips are down, quite likely to "make an exception" or otherwise try to get away with something.

Even those of us who are very ethically strict with ourselves slip up now and then, and it's for that reason that I'm inclined to be forgiving if circumstances warrant it (except with myself: I'm really quite mean to myself at times). One cannot operate in the world without a little forgiveness.

by awfernald

the biggest problem I've found, is the attitude that you eventually get to of "If you can't beat em, join em."

Course, I got laid off before that could happen, so... :)

Now I'm working on my new startup!

by hal 9000

I always tell the end user and who ever else is involved what I'm doing to cure a problem that has arisen. I never do any work without first telling the people what I'm attempting to do or what I expect to happen. Although there are exceptions to this that is the common thing that I do personally and I do not have a problem with it. Of course they may not be understood what I'm saying but at least I do try to put it as simply as possible and at least I've told them.

The only time I've ever refused to do something was to alter an IM account to send a copy of all messages to the owner as that person already had access to this information and if they wanted to use it as evidence in a court action after dismissing the person for abusing the system they didn't need real time access.

However they where not interested in sacking the young girl that just wanted it for the kicks and to me that was even worse particuarly when they had told her that any IM that she received personally would be private and confidential.

Col

by tony hopkinson

perv ?
If you'd have done it what was his next request, a web cam under her desk so he could check her posture.?
I've been told to 'temporarily' pirate software, I've been asked if I can crack software protection as well but that seems to be small potatoes. Wonder if we should be more worried about our employer's ethics than our own.

For some reason the character Jimmy The Saint from Things to do In Denver when you're dead, springs to mind.

by hal 9000

But by the same token I do use unlicensed products for testing purposes as well. I just do not see why I should pay good money for something that will only be run for a few hours/days and then get dumped.

Even the Techs from MS suggested this course of action and I really do not have a problem with it. But if I was making money off it, it would be a different story. Rather it is used for testing new hardware and patches before rolling them out.

Incidental the person in question who asked for the above was a female so it sought of makes you wonder what goes on in some peoples brains, doesn't it?

Col

by rknrlkid

of a discussion I started and half the people flamed me for suggesting there be ethics at all.

For those who would like to see some kind of ethical standards in IT, here is some beginnings:

http://sageweb.sage.org/ethics.mm

http://www.cs.utexas.edu/users/ethics/

http://www.brook.edu/ITS/CEI/CEI_HP.HTM

by awfernald

for suggesting that we implement any type of Ethical Standards in IT? dang, I'd take you out and put you in front of the rubber band firing squad.

Are you trying to say that we should forget our roots?

Are you recommending that we should drop the politics from our everyday moves?

Are you thinking it is possible to separate our own god-like lives from the fate of this 3-billion/year company?

WE are IT!!! IT is WE!!!! and I IS the KING and all shall bow down before me and do business as I and I ALONE Demand of them.

Your business process sucks, change it to fit my IT process! Then and only then can you realize the golden grail of automated business process! Then, your checks shall flow freely.

Then... oops, sorry, it broke :( Guess IT really should try to support business process rather than vice versa.

by admin

By Ethics it is generally meant "the discipline dealing with what is good and bad and with moral duty and obligation" (1rst definition Webster Online) but a second definition from the same source is more specific and may apply here:"the principles of conduct governing an individual or a group"

Right away you will notice this general definition is distinctly Dualistic in nature and when applied to Western thought you don't really get (or at least want) grey areas. We want Right or Wrong- to know which it is and act on our moral obligation. Then we have a "yardstick" to measure whether or not we act on what is right.

What is encouraged in Western society can be quite different however. Rosa Parks broke the law when she sat in the front of the bus. Most people believe this was ethical- in fact quite the moral thing to do- and she is praised for it today. Jesus broke Jewish Law constantly- healing on the Sabbath etc. Speeding to get a person with a snakebite to the hospital- a million people and scenarios where in the first definition it may be proper and even heroic to break the law for a moral principle that correctly overrides it. With the exception: " I broke into wi-fi to save a life" I cannot think of a single instance, however, where it would be morally prudent to do so. It is different to connect rahter than break in though, and this is where I see the real question: " How can you tell if you are on a public or private WAP?" Of course, that is not so exciting a headline though...

The second definition may be more applicible here: "the principles of conduct governing an individual or a group" we are, after all, a group of IT professionals and there should be some standards.

In fact, I have found the #1 reason people I work for hire a particular IT worker, especially at Admin or above levels is specifically their estimation of integrity and honesty. Despite what people have said about every job being politicol being true to a point, most businesses know what incredible damage a dishonest IT worker can do to their business.

Addressing politics at work I would say this. You can be politically savvy and honest. It requires some tact and discipline in presentation at times, but they are not mutually exclusive. Honesty, at times also means knowing not only how, but when and to who to present something. Sometimes when honesty doesn't work it is because it is presented arrogantly, for self rewards or as a hammer. The fact that this doesn't work is not a fault of honesty. Also, sometimes the intention may be good, but the skills of the presentor are not polished. This is something to constantly work on to get into and thrive in management.

Back to ethics in IT as an industry. Here are some good ideas:

http://onlineethics.org/com/index.html

but I would say this is usually dictated not by the industry, but by the company you work for in the real world.

So, as far as the wi-fi question, I believe for now it is addressed 2 ways. The first is individually, where I am afraid in the west it is generally situational in a world that desires to define everything as Bad or Good. Still, the existing laws should of course be followed by the prudent individual except possibly in rare circumstances where it is seen as quite heroic to break the law for good reasons. (No wonder kids wanting to be seen as doing something important over-ride the law in an attempt to impress their society!)

The second way is to find out what your company, or other group position is on this unless the IT world gravitates towards a single ethical oversite body that is generally accepted and ascribed to. Personally, I do not see this coming as the speed at which IT progresses makes it very very hard to unionize or otherwise create powerful groups.

I did answer:"something against which all situations can be rated" with three possible choices in another post here: The Golden Rule, The Categorial Imperative and The Golden Mean were offered. There are, of course, many others, but a clear industry position has yet to develop IMO.

by cactus pete

There is one aspect of the ethics issue I want to make sure gets into the discussion:

When you leave the office, do you leave the "ethics" there?

Example:

At the office you follow and enforce a set of ethics with respect to your profession. When you go home, or on holiday, would it then be completely OK to piggyback an unintentionally open hotspot? [Just using hotspots as the easy analogy, feel free to bring your own.]

Can you have one set of ethics at work, and another at home? Should these carry over to one another?

by admin

Software use is a big analogy IMO. I know a lot of people who will license at work because they have disgruntled employees calling the Piracy Hotline and thus a "risk management" postion driving policy and procedure at work and yet not at home. At home they may pirate like the dickens. Professionally these actions would be incongruent ethically and yet personally they may be congruent, as even though it is against the law, our society does not yet see piracy as "bad" generally- even though professionally it is increasingly discouraged. Interesting, eh?

To get on topic though, I fundamentally believe that a city (or person) divided will fall. Actually, this is what is bugging me about the American politicol dualism right now. We aren't unifying over anything really- just creating deeper division- but that is another topic.

To me, this seperation of personal and professional ethic is a problem (unless you are pathological) with the human psychology and the modern world. In order to make more money, gain more power etc. you are often asked to hold increasingly incongruent ethics in your personal and professional life. I believe this creates "walking timebombs" within us. It is, in my estimation, a problem. All I can say is to, as much as possible, align yourself in a field and with a company that is as congruent to your personal ethic as possible.

I, for instance, desire to help others and make the world physically better. I have found healthcare to be, while not at all perfect, mostly congruent to my goals. I do not think this is for everyone. Different people have different personal ethics.

When one is first starting out, they can't necessarily afford this luxury of congruent ethics. We are all working within a hierachy of getting our needs met and must be less picky when we need basic food and shelter, but we should be striving towards higher goals IMO- that is what keeps the human spirit fresh. So there is the matter of knowing that one may be working on long term goals, but in the short term having to accept a wider gap between personal and professional ethics. Still, there should be a bottom limit, and each person should know what it is- or be in the process of finding out by listening within until they do know. Of course, the pathological person never will know, but society generally sorts these people out in time.

This is my point really. Ethics do speak to right and wrong, but are also broader and speak to good- better- best- better than best. Ethics are part of the human process and cannot be seperated really. Our ethics must support where we are at in the process at a given time. Sure, there is some bottom point we have to draw the line. Some examples may be "don't do anything illegal unless there is a VERY VERY good reason". "Don't do anything generally considered very immoral in your society".

I would suggest that a person does not support or do things they really really hate. There is almost always another way to eat and sleep without resorting to this. By choosing to stay somewhere you real really hate you are denying yourself growth and possibility.

Don't let your personal and professional ethics get too far apart for too long or you will have problems. Only you can find where these lines are for you.

So, application to Hotspots? Personally, I would never enter the network of another person if it was clear it was unsecured and not public. For instance, I have seen Dentist and Dr. Offices locally that have their office names identified and yet, are in fact open. I don't use these.

WAPS that say "Public" or are known public (University, Coffee Shop) I will use. I will also use an unidentified WAP that appears public and does not appear to be mistakenly so, but consider all connections -including those coffee shop ones- to be at my own risk.

At one time -in an effort to catch a malicious person using my Public WAP- I put a packet capture program on the WAP connection. Imagine what I found out about the use of my WAP. There is a security question at the other side too. I would be careful that the info I was sending and my own laptop security was set with the assumption that what I was doing was public.

So, for me the professional and personal ethic is fairly congruent as far as WAP's. I would follow these guidelines either way. It helps me sleep better :)

In conclusion, I would say that not because of some perfect morality or ethical standard should we strive towards congruence in our personal and professional ethics, but because our basic health and well-being depends on it, especially over time. It is a practical reason in this case that they "carry over to one another".

by apotheon

I wish it was that simple. Even if you haven't done provable damage, you can get the shaft. There are criminal legalities as well as the civil legalities, and you don't have to do any damage to suffer at the hands of criminal court.

Besides, the definition of "damage" is quite different for a lawyer than it is for those of us just trying to get through our days without having to deal with the judicial system.

Typically, it's not actual threat to the company that prompts that sort of legal reprisal, anyway. It's usually somebody high up the food chain that doesn't like to be "embarrassed" by having the lack of effective network security pointed out. The spiteful response, then, is to squash the good Samaritan who offers to help fix the matter.

by apotheon

I don't have a specific set of "IT ethics" by which I abide. I apply a universal and strict system of ethics to my entire life. My work in IT happens to fall within the range of "my entire life".

by jdclyde

Funny how that works like that for some people.

Go figure.

Standards? What is that?

by jamesrl

Said that going through your business supplied email account was totally fair game.

It came up in the case of an employee who was secretly negotiating to leave his company and go to a competitor. As part of the deal he sent company some confidential documents before he gave his notice. Someone thought somethign was fishy, checked his email, and he was sued. He claimed he had thought he had a right to privacy. The supreme court held that if the company provided the email services, they were entitled to see everything on the system, with or without the permission of the user.

I don't think its moral to allow admins to go wandering through everyone's email at a whim. There should be a system where it is only done with permission of some third party like HR when something is suspected of going on.

James

by jdclyde

Went there to get my Unix Cert MACE.

Had the choice of go and spend a week at a time in Mississauga or got down to scenic Detroit.

Wasn't a real hard choice and only about 3 hours drive more.

by jamesrl

I once went on a vacation to Sandusky to visit Cedar Point, home of all those great coasters.

On the way back, we decided to drive through Detroit to Point Huron, spend the evening and then go back through Sarnia.

On the road up we were detoured off the highway and onto some seedy side streets in Detroit. Honest - we saw a drive through strip joint.

Mississauga is hardly scenic - typical suburb. I live just north of there -we could have had a beer.

James

by hal 9000

What where they sending out as your e-mail account?

While I do not have a problem with doing routine checks on e-mails particuarly if a employee is suspected of doing something against the best interests of the company I do not regularly snoop either as I just lack the time and inclination.

But in the above case without knowing or for that matter even sending an e-mail you could find yourself in major trouble if someone took it upon them self to send a ransom demand from your work e-mail account or something similar.

Col

by xmlmagician

It is down to preference...if you want to be ethic you will if you dont want too you want....there is not a right or wrong answer. This is a good question to debate on but everyine knows how things are working in the real word

by hemant

my experience at my work place says its good to ethical 'coz we cant carry two different expressions/attitudes for outside world & work place.
We will need a Duplexing Add-on in our souls then... :)

Hemant

by okapoma

I strongly feel IT members of staff should practice ethics every time.Even to users or fellow IT staff.They should not take advantage over users with less knowledge about IT world. Infact they should light this ethics to the users.In order for them to respect the IT industry and feel secure to be part of it.

by jason.ungerer

Reading the sticky and touchy subject of Ethics. My Firm went through a long case study and came up with a set of ethics questions that can be used from IT, HR, Admin, FIN and what ever other dept you may have. Our Dept has used the following as strict guidelines and implemented it with our performance appraisals. Here it is:

1. Is it against the Companies standards?
2. Does it feel right?
3. Is it legal?
4. Will it reflect negatively on you or the Company?
5. Who else could be affected by this (others in
the Company, clients, you, etc.)?
6. Would you be embarrassed if others knew you
took this course of action?
7. Is there an alternative action that does not pose an ethical conflict?
8. How would it look in the newspapers?
9. What would a reasonable person think?
10. Can you sleep at night?

Tough guidelines to follow, but these work.

Regards

by tonythetiger

What would be handy to have though, is a reference point. Humans compare things to draw conclusions. It would be nice to have a composite view of what we all think about it. Sort of a handbook or something.

by xmlmagician

I believe that it is totally up to your point of you. Imagine that what it is ethically right for someone it is not for someone else. Down to culture as well something that it is moral in UK it might not be moral in US. As i said to one of my previous post there is no right or wrong answer. I agree in one thing. The one rule that you should have is that if you do something will let you sleep at night. Of course you might be a night person or dont need loads of sleep ;-)

by tcrom2

The way I look at it is, I was one of the "stupid" people at one time. Would I have wanted someone to take advantage of me?

by hal 9000

I've seen numerous cases where small business have been taken to the cleaners on hardware acquisitions and installations.

One that springs to mind was a very small company that ran a 6 station per to peer network with an ADSL Internet connection. Now the bright spark who sold them all the hardware and arranged installation had an ADSL modem connected to a hub and then feed every computer in the place. The computers naturally enough only had Windows loaded on them although it was XP Pro and other than a accounting package left over from the old computers there was no software at all except for the stuff that came with the hardware. There was even one computer that required 2 monitors so they supplied the 2 monitors but with no way of connecting the second one.

The person who was engaged to pull the wires ran cable through the entire place and fitted the sockets but nothing else and walked out of the office saying "I'll be back" well 10 weeks latter when he had not returned I was asked to fit a DVD reader and when I got there I found that to send a file from one workstation to another maybe 10 feet away they had to e-mail the file.

I was also asked to get the spell checker working on the Word Processor which in this case was Notepad as they had been told that this was a WP. The company by this time thought that everyone in IT was out to get as much as possible from then and at the same time provide as little as possible.

Honestly I do not know how some of these people sleep at night with their actions and it is their actions which make it all that much harder for the rest of us who are trying to do the right thing.

Col

by bart.mudde

IT is a business. As in most businesses, there is no ethics, there is only the law.
If the law does not forbid it, you can do it if you think it is profitable. Ethics do not come into the equation.

by zatkoff

It is due to a mentality of "winner take all at any cost" that pushes ethics out of condieration. No decision should ever be made w/o an understanding of the effect on company, community, etc. If ethics were practiced as they should be we would not have courts filled with white collar crime like Enron!

by rjhubble

Personally, I believe that any It person who takes advantage of a customer's knowledge (or lack thereof), hurts the whole industry. When the customer finds out that they were taken advantage of (and they will), they then feel that all IT personnel are unethical. Now that customer is spreading the word that every IT does it. I know of a few IT personnel who do this on a regular basis. I never downplay any other business, yet at the same time, I hear from customers who have had bad dealings with unethical IT's and I just stand there in amazement at what I am being told. I feel that any IT who does this will not be working for long before the word gets out that they have taken advantage of the customer. Let me ask that IT how he would feel if he was to have his vehicle break down and the mechanic replaced his whole engine over several trips to the shop, when originally a simple thing like a belt would have fixed the problem , yet the mechanic changed some setting in the timing, carburator, ect. all because of his lack of automotive knowledge? Now that IT is ticked off at the mechanic shop. He should think about that before he ripps off a customer for their lack of knowledge. What goes around, comes around. Put yourself in the customer's shoes, with a scenario in an area that you may lack some technical knowledge, would you like being taken advantage of? I think not. Treat everyone else like you want to be treated and see how many satisfied and loyal customers you make.

by rjhubble

OOPS....I didn't realize this was speaking of a wireless lan untill after I had posted the previous comment. But I believe the idea is the same in all of life. I am an owner/operator of a small oem systems builder/ repair shop. In other words I custom build pc's and servers for individuals/ other companies. I also do repairs on their systems and some networking(mostly setting up networks of 8 to 10 pc's and maybe a server). I am still very much in the learning mode of networks. I have several other IT techs who are more knowledgeable than I am in some IT areas that I have come to trust and we share our knowledge base much like in these forems. But getting to the point...no matter what your IT knowledge base is or isn't, you should always in every area of life be honest and hold onto your integrity. Something most people don't even think of these days. I may be a small shop, yet I can safely say that over 95% of my business is from repeat customers who know that I will be totally honest in every aspect with them. If I don't know how to do something, they know I will tell them "I don't know, but I will look into it with some of my other contacts and find out, or maybe you can try this individual over here, maybe he/or she will be able to better help you."(of course, I have permission from the IT tech, who I am recommending, to give out their name and phone number to my customers who may need their help). This let's my customers know that I will do the best of my ability to take care of them. Good ethics is like honesty- either you are, or you are not. Yes, I have made a few mistakes and sometimes I may drop the ball and access something I shouldn't (through my lack of knowledge, but when I discover that is an area I should not be in, I immediately get myself out of there, and I never divulge what I have found to anyone or use it for my personal gain. I forget what I have seen that may be private immediately. I believe everyone should be ethical and honest, in all areas of their life. Yet I also know that in the real world, most people are not, and some make mistakes because of lack of knowledge (in which case forgiveness is best). Just treat the customer in their best interest (like piracy is not in their best interest because they can go to jail-which definately is not in their best interest). But the main thing is keep your integrity, ethics, honesty(which to me are all one and the same) intact and do not compromise, and see what type of customers you will attract. I would much rather have satisfied customers who bring in others through word of mouth and keep coming back themselves with their problems, than to make a quick buck ($) by ripping them off.

by ralphy123

you can do something doesn't mean you should do it. I believe most individuals know what is right and wrong.

by racote

Ethics are not something in a "code" or other body of law. They are learned from your parents and other role models through your observation of them. Not what they preach.

Ethics courses and seminars seem to teach rationalization not moral behavior.

If you are in a situation and you have to stop and ask yourself if it's wrong - it probably is.

Another thing your grandmother said - the one about two wrongs, that's also true. Just because you feel the company or a person owes you, doesn't justify an immoral act.

One more thing before the sermon ends - just because it's legal doesn't make something right.

by rjhubble

I agree with you. Ethics are learned not taught. It all boils down to being honest doesn't it? If you have to ask yourself if this is legal, or is this ok, or is this right? chances are that it is not legal, it is not ok, and it is not right. Being legal does not mean being right. What would your grandmother say? What are your actions saying about you and your character? What kind of person are you really?

by james.august

As for others who feel it necessary to steal others WiFi, well they will be caught. Might not be at home, but their ethics will slip and they will pay the price.
It?s best to just live by the law of the land, than to be a rebel and get fired from your job for bad ethics. Those who brag about such things can make their own lives miserable at work if their bosses find out. After all, those who have no ethics says something about their character.
My 2 cents.

by deejay54

I know of several people, including myself who have dicovered unsecured wireless networks. None of us has taken advantage of this, and have made attepts to contact these people and offer assistance in securing them.
Maybe the question of ethics could be put the manufacturers of WiFi equipment for selling a product without a warning label.

by brian.giordano

For anybody in IT that really acts this way, think about this...

Let's say you woke up one morning and felt some terrible pains in your chest. The pain is just too much to handle, so you go to the hospital. The hospital admits you. Ten minutes later, a doctor comes in to see what the problem is. He gives you a full exam and decides that you need to have emergency open heart surgery right away.

Now, all you really have is a bad case of heartburn, but guess what? This particular doctor thinks that you are too stupid to realize this and decides to take advantage of you. He might even 'change a few settings' while he's in there.

I have been in IT for the last six years now and I can promise you that I would not have lasted this long without taking ethics into consideration.

by hawk si

Yes we need ethics. That is, ethics in people and actions. We do NOT need another piece of paper or document that people still won't follow.

We already have a workable ethics guideline in RFC 1087 (see http://www.faqs.org/rfcs/rfc1087.html ). It says in part:
The IAB strongly endorses the view of the Division Advisory Panel of
the National Science Foundation Division of Network, Communications
Research and Infrastructure which, in paraphrase, characterized as
unethical and unacceptable any activity which purposely:

(a) seeks to gain unauthorized access to the resources of the
Internet,

(b) disrupts the intended use of the Internet,

(c) wastes resources (people, capacity, computer) through such
actions,

(d) destroys the integrity of computer-based information,

and/or

(e) compromises the privacy of users.

sniffing other people's traffic, no matter how stupid they are, is at least unethical (& may actually violate federal wiretap laws ...).

The BIGGEST problem is that while there is a written ethics standard, too many people 1) don't know about it ad 2) wouldn't follow it if they did. We live in an era of very fluid values (Bernie Ebbers, et al) and very little ethics.

Ethical behavior is when you do what is right when no one is looking. Of course, it requires you have some idea of the difference between right and wrong but that's not solely a tech problem, now is it?!

by tonythetiger

How about the other way around? while performing your duties as an IT person, you discover something you really wish you hadn't? Someone ELSE taking advantage? It REALLY bothers me knowing... but if I tell I'll be retaliated against (people tend to "shoot the messenger"). Where is a good place to learn some guidelines?

by gracedman

The foundation principle of ethics in my world-view is putting other before self. In other words, guided by wisdom, we choose to sacrifice our freedom to do what satisfies ourselves to do instead what serves other. More succintly, we do what we should rather than what we can.

As alluded by others, ethos proceeds from what we are, not what we do. The same internal ethos that says, "I am free to take this money out of this wallet I found but instead I will sacrifice that freedom for the sake of the owner and return it to them intact," is the same internal ethos that says, "I know I am free as the e-mail administrator to read these confidential e-mails and satisfy my burning curiosity but I choose not to satisfy myself because it violates the trust of the person who sent it."

It is a very slippery slope to separate personal ethos and corporate behavior, in fact, it is impossible - we do what we are or, as Lao Tse, the founder of Taoism would more positively say, "to do, be". No matter how technical or corporate, the world still revolves around people. Corporations and departments who forget that experience only transitory success at best.

John Paul II states it even more forcefully for our modern, corporate world. He condemns the "objectivization" of people. That is, when we treat people as objects for our own consumption or exploitation, be it sexual, visual, financial or political rather than in their subjective reality as our brothers and sisters, we sow oppression, injustice, violence and every evil. In our own little worlds, when we treat others as objects for our use, when we gratify ourselves at the expense of others, we become our own little oppressors, polluting the world around us.

In a final approach to this profound subject, we can say that there are only two ends in life. For everything we do we can ask, "Why?" until we come to one of two end points. Either we do for self or we do for others. Others phrase it by saying there is either give or get, or either love or selfishness. So in judging our own lives, our own ethos and our own outflowing ethic, we need to ask, "do we live for self or for other?"

These are the foundations of ethics in all we do.

by handtech tc 92119

Two kinds of people in this world, folks with character and folks who have no character. And folks with character know that character is doing the right thing, even when no one is looking. Personally I make a decent living educating people on how to secure thier networks. Sure people are undereducated on the subject, that's why they call pro's in. The responders here who feel it's incumbent upon the user to educate themselves could stand to remember some of the people who educated them when they were "stupid" too.

by too old for it

The problem is that the unethicl person is the one that will be left after all the ethical people are RIFF'd out of the company. After all, the stupid users who leave open wireless networks are the same ones who think your job is done better by Puali the Punjab only because he will work for 10 rupees an hour.

I do my part to get them secure, but unless and until there is a IT ethics test that will lead you to a high 5-figure starting salary, "would you like kraut with that dog" is the trend in IT ethics.

by packratt

Is the adherence to an ethical or moral code an advantage or disadvantage?

Certainly some view ethics as a bothersome hindrence, a crippling disadvantage that should be taken advantage of when others are hobbled by it's constraints, reality dictates that might does indeed make right and ends always justify any means.

Others view ethics and moral codification as necessities for the sustainability of beings that are dependent on social interaction as a survival mechanism and that those who do not posess an inate desire to be ethical or morally "good" are psychologically impared and would destroy society and thus those beings dependent on social interaction are required to restrain those who are unable or unwilling to abide by ethical/moral standards of behaviour because if such people were left unchecked they would destroy society and thus jeapordize humanity.

Perhaps something to consider for a different thread someday?

by it security guy

Ethics and morals are based on a person's belief system, and less on actual laws or policies. What would be considered ethical for one person may not be for another. The best way to apply ethics is to start with written laws. Then you add in a standard of behavior that you would want others to apply to you. And that would be beyond your individual belief system. Add to that morals and I think that can get to a level of standard behavior that most could agree on. Once that is written down, there can be an "Ethical Use" policy for IT staffers and end users. I believe there have been "morals" clauses added to some pro sports contracts because of the behavior of those like Kobe Bryant. It is unfortunate that such a policy is needed, but this modenr era is not so modern when it comes to some people's actions. Greed or personal power over others can sometimes tip the scales to the non-ethical side (similar to the whole Dark side of the Force in Star Wars). People will be tempted, it is having something to help each person not give in to the temptation. After pracicing that kind of behavior, I believe it becomes easier to do and will eventually become second nature.

by underground_in_tn

Why would ethics in IT be different than the rest of life? I submit they shouldn't be - the general ethics of life can be applied to specific cases in IT as they are in other areas of life.

A few years ago I began to hear business people talk about a separation between their personal and business lives, that what they would never do in a personal situation, they would have no problems doing in business. I find this kind of situational ethics to be rather schizophrenic, as if it's okay to have two different personalities.

by donk7549

Those of us who seek justice for ourselves, must always and forever seek justice for all others, even our staunchest of enemies, otherwise there will be justice for no-one.

by brad.marlin

Question that i always ask myself is 'does this feel right to me" If it does then it is ethical
thing to do, If it doesn't feel right then the issue is unethical.

I've been involved with the setup of numerous networks,small to multi enterprise .
At one point in my career I know very little about it.
But I took the time to learn, pay attention
Not everyone does,
But I what learned most from my peers was the ethics.And I've found that i would much rather work with someone who is ethically correct then having to tell someone they are not . Because they just don't get it!

by keithjohnson

For anyone who is interested, please go to the ISACA, ISC2, SANS, or numerous other IT organization's websites and review their "Code of Conduct" or "Code of Ethics" statements. For one to receive certifications such as the CISSP, SSCP, CISA, CISM, GSEC, and almost all others, you must adhere to such standards.

I can understand that some feel there might be some very small grey areas that they might feel they need guidance or clarification on, but overall, there really whould be no question regarding "The right thing to do". I was somewhat disappointed with the numerous postings where individuals make statements on what is clearly unethical activity. Such activities do impact our profession and on becoming public, reduce our credibility and lower the level of respect that persons outside the IT industry have for us. These statements reveal the sad state of affairs that ethics in IT is in.

A couple of years ago, I had to terminate an employee for revealing to another individual information he had seen on the CFO's computer while performing some maintenance on it. On his HR record, it states he "betrayed the trust of his position."

An individual in IT is in a position to see a an extraordinary amount of confidential and/or otherwise sensitive information. Often overlooked within the hiring and screening process of selecting an individual for an IT position which is privy to sensitive and confidential information, is trying to determine, as reasonably possible, that the person is of the highest possible moral fiber and does abide by some set of ethical guidelines. It is a line of questioning I vigorously pursue and I believe every person in a management position should. Allowing an unscupulous IT person access to such areas is akin to the "Fox guarding the chicken house" and an irresponsible act by the person's superiors.

All persons within IT and particularly those in management should familiarize themselves with laws related to IT (GLBA, SOX, SB1386, HIPPA, etc.) as well as those they related to individual privacy. Such knowledge should be a prerequisite for key positions. Education Institutions should include ethics and the applicable laws are part of the IT cirriculum. Accounting professionals are expected to be familiar with laws and code that impact their jobs. Electricians and plumbers are expected to be knowledgable of legal and building codes that impact their profession. Why would IT be an expection?

Persoanlly I believe that as IT continues to become more integrated into the systems that support our lives, we will see more and more legislation to protect the privacy of personal and corporate information. As these standards continue to evolve, some persons to are unaware or allow themselves to fall behind by not staying informaed and up to date may find themselves out of a job, or worse, in court for breaking a low they weren't even aware existed.

Just my two cents worth.

by technicallyright

I agree that it is unethical, I also agree with the post about the golden rule.

I have seen unethical behaviour run rampant in IT be it those who capitalize on other's fears or ignorance or the sales person that soaks the consumer for a state of the art PC to do word processing or surf the internet. I have also seen it in the workplace, I.T. employees b.s.'ing management or users about the difficulty in doing something, or making a simple task seem complicated just to gain a sense of job security or superiority.

I suppose illegal software would fall into this category of unethical behaviour, the problem is now socially based and how society perceives the question "what is stealing?". Because something is not tangible does that really make it stealing? I think it does, but there seems to be a large percentage of those who do not.

There are two bigger problems that complicate the moral issues in general, profit and politics.

I applaud and encourage those who do operate with morals and hope we don't get too battered in the end!

by bartlmay

I beg to differ. Illegal is illegal even if you do not get caught. And there is a difference between getting caught and getting prosecuted. I have had the philosophy of if I stumble over what would be easy to take advantage of I bring it to the customers attention. This in turn gets me not only a good reference down the road but word of mouth advertising. Which in turn gets me more income that the illegal act that I would have committed.

by sdmagic

Another word for that is, Karma. Let's add two more to the list:

You reap what you sow

All deeds come back to haunt you

by erich1010

Generally, the idea is, as was said before, The Golden Rule.

However, all circumstances are unique and require special consideration. Consider the following examples...

In the case of WiFi, there is no way to ask the user if they are benevolent or stupid. Therefore, if you use an open router, be considerate and try not to abuse the priviledge.

Much of our income, though, is based on the ignorance of others. If they weren't ignorant of specific things, they wouldn't need us.

A man goes to a mechanic and tells him, "I've taken this car to several mechanics who charged me for hours of work, but were not able to fix the problem. Could you take a look at it?" The mechanic checks the car out and says, "Sure. I can fix it, but it will cost you $100." The man says, "Ok. It's a deal. Here's $100". The mechanic reaches into the car, tightens a couple bolts, and says, "Ok. It should work now." The man exclaims, "$100 for just a minute's work?! That's a rip-off!! You're just taking advantage of me, because I don't know about cars." The mechanic calmly pockets the money and says, "Look. You went to several mechanics and wasted much more than this on them, and they weren't able to do the job. When you came to me, you weren't paying me for how long I worked, but for the information I knew."

Usually, it's all in how you look at it. If you adhere to the Humanistic point of view, you'll probably be OK, though. There really are no hard rules in this. If ethics were easy, lawyers wouldn't rich.

by bhunsinger

"If he play, being young and unskillful, for shekels of silver and gold. Take him my son, praising Allah, the lamb was ordained to be sold"
Kipling
Now that I've got your attention there are two ways to approach life or living
Everything not prohibited is permitted
Everything not permitted is prohibited.
These two dualitiies are what creat gray space, because neither, taken to the extreme, permit society to function. The quote shows how to thread the difference.
The condition imperative is "if he play" at the gaming tables. Anytime you enter a contest,playing for high stakes, not knowing what you are doing, you will get your head handed to you. It's called learning to play with the big boys.
If I, as set forth in the initial question, turn on my laptop and I automatically connedt to a network, it is permitted. Or as my grandmother taught me "Don't look a gift horse in the mouth". If I do no harm to their network, I am ethical, because their action made me feel like a guest. I then should be courteous to my host.
Am I unethical to read a newspaper by leaning under the lampost in a parking lot? Is it wrong to listen to a movie from a drive in theaters broadcast outside their lot? I have not tricked cajoled, lied, or cheated to do that, I am benifiting by their choice to use their equipment as they see fit.
As for different ethics, what I do in my personal life and my business life can be governed by different rules. Ethics is following the rules and custome of the place you are. It is not ethical to use your strength height and weight to get your way in a baordroom. It is unethical not to do so on a football field.

by edward18

I've been helping people with computer problems for i don't know how long. 18+ years.. My hardest problem is charging people for the stupid crap that microsoft windows does or the things said users are allowed to do , possibly causing damage to the OS.

If you take advantage of ignorant users you deserve a visit from the authorities.

by bobv

You are there, because the users don't know what to do. That's why you have the job. They depend on you to protect them, not take advantage of their ignorance.

by naybob

If you were going into someone's house to fix their refrigerator would you stop on the way in and change the settings on the thermostat, have a piece of the cake sitting on the counter and rearrange the pictures on the wall?
If I go into someone's computer to fix a problem it isn't my place to re-arrange anything (even if's put together in a way that wastes space or resources and would benefit them)unless I explain and ask them... and then they'd need to know if or what this extra attention might cost them.
Before I went into this field someone came in to help me set up a small office network, a professional. When I was working through some registry problems later I found personal comments in various odd corners about myself! Needless to say I was rather angry!
To me this says more about his lack of integrity than my lack of knowledge. It also reflects on his company- which I would never do business with again.

by cagedmonkey

I personally have always had my own set of standards and ethics that I live by. Personally I think many would do well to just have some. When I became a Certified Quality Technician back in 1995 I found that many of my own standard meshed quite well with the ASQ's (American Society of Quality) code of ethics:
http://www.asq.org/join/about/ethics.html

Just because you're not at work doesn't mean you should check your ethics at the door.

If you as an admin had someone tell you that you had an unsecured AP would you not be grateful? Why should it be any different in a home, if you discover an unsecured AP it should be your duty to let someone know, not just let them figure it out on their own and let them get hosed over.

ASQ Code of Ethics
To uphold and advance the honor and dignity of the profession, and in keeping with high standards of ethical conduct I acknowledge that I:

Fundamental Principles

Will be honest and impartial, and will serve with devotion my employer, my clients, and the public.

Will strive to increase the competence and prestige of the profession.

Will use my knowledge and skill for the advancement of human welfare, and in promoting the safety and reliability of products for public use.

Will earnestly endeavor to aid the work of the Society.

Relations With the Public

1.1 Will do whatever I can to promote the reliability and safety of all products that come within my jurisdiction.
1.2 Will endeavor to extend public knowledge of the work of the Society and its members that relates to the public welfare.
1.3 Will be dignified and modest in explaining my work and merit.
1.4 Will preface any public statements that I may issue by clearly indicating on whose behalf they are made.

Relations With Employers and Clients

2.1 Will act in professional matters as a faithful agent or trustee for each employer or client.
2.2 Will inform each client or employer of any business connections, interests, or affiliations which might influence my judgment or impair the equitable character of my services.
2.3 Will indicate to my employer or client the adverse consequences to be expected if my professional judgment is overruled.
2.4 Will not disclose information concerning the business affairs or technical processes of any present or former employer or client without his consent.
2.5 Will not accept compensation from more than one party for the same service without the consent of all parties. If employed, I will engage in supplementary employment of consulting practice only with the consent of my employer.

Relations With Peers

3.1 Will take care that credit for the work of others is given to those whom it is due.
3.2 Will endeavor to aid the professional development and advancement of those in my employ or under my supervision.
3.3 Will not compete unfairly with others; will extend my friendship and confidence to all associates and those with whom I have business relations.

Obviously you'd have to modify these to suit our industry but the still remains the same.

by tmcal

Why is it a question of ethics by profession? You either have high moral and ethical standards by which you live your life and work by or you do not. You can not pick and choose when to abide by moral and ethical codes.