Re:Coding in the open: how to do it securely
by theoh on Wednesday September 27, 2017 @04:30PM
(#15351998)
The act of verification (of suspected fraud) is not costless to the various parties involved. So say I keep getting inconvenienced by this verification because of my behaviour ("was it really you who made this request?") then someone should be accountable for all those false positives. "Parallel construction" creates an accountability. I know it usually means something more sinister -- but just symtactically it's a good description of the requirement.
Re:Coding in the open: how to do it securely
by marcosdumay on Wednesday September 27, 2017 @05:25PM
(#15352489)
I do think we are trying to say the same thing. When I say that no unreasonable additional power should be gained by such detection, I intend that between a few things that the verification should not be costly to the investigated party (costs should be only on the investigators). Looks like you are naming that verification "parallel construction", and so, I do agree.
What you can't do is detect it by opaque means and then proceed to sanction people or even gather some too elevated investigative powers.