News for hackers. Stuff that matters.
Re:Should computer science researchers disclose negative soc... by glitchc on Friday August 03, 2018 @09:39AM (#17679715)
Then don't call yourself an engineer. Engineers build bridges, airplanes and when those fail, engineers are investigated for culpability. If the failure is due to a design flaw or cut corners, engineers are held responsible. I say this as a computer scientist with an undergrad in eng and a PE.
Re:Should computer science researchers disclose negative soc... by slededit on Friday August 03, 2018 @09:41AM (#17679728)
Those are first order effects connected directly to the immediate aim of allowing transport over an obstacle. A civil engineer does not consider "who" will cross or what their aims will be. For example a bridge may allow an enemy army to move their tanks faster during wartime.

Similarly tech shouldn't have to consider whether someone with unrelated goals will use their tech for unwanted aims.

Re:Should computer science researchers disclose negative soc... by glitchc on Friday August 03, 2018 @09:52AM (#17679825)
If you know your software will increase emissions to illegal levels, and still write it, you are culpable.

If you write software for autonomous cars that is not foolproof at detecting pedestrians, you are culpable. In aviation, catastrophic failure means at least one death and the system should have an overall probability of failure at 10^-9. Critical software is frequently written at one or two orders below. That means 95%, 99%, 99.9%, are not enough.

Re:Should computer science researchers disclose negative soc... by stlHusker on Friday August 03, 2018 @10:08AM (#17679942)
What are the limits of culpability and what are you responsible for? The article is pushing that definition beyond the first order effects of safety. And the proposed solution is that gate keeping is done by the press and the public. How well do you think that will go?

If you write software that replaces someone's job are you "culpable"? If you create a phone and people are killed when someone texts and drives are you "culpable"? If you create a better facial recognition program as part of building a secure access systems and someone uses that system to discriminate are you "culpable"?

I find this unending process of creating "victims" just so they can be "saved" as tiresome.

Re:Should computer science researchers disclose negative soc... by jonnycomputer on Friday August 03, 2018 @10:22AM (#17680065)
I find engineers and entrepreneurs who shirk their responsibilities as moral agents tiresome.

If a thief comes and steals money under the mattress meant to pay for your kid's college tuition, and your kid is dropped because she can no longer pay, your kid's loss is a second order effect of the thief's theft, but I still hold the thief responsible*

* this is a hypothetical story; please don't save that kind of money under your mattress.

Re:Should computer science researchers disclose negative soc... by slededit on Friday August 03, 2018 @10:39AM (#17680209)
Your argument has some basis in law and I do find it compelling. The nuance to my argument is that the original creator did not have nefarious aims. I believe that does make a difference.
Re:Should computer science researchers disclose negative soc... by CJKinni on Friday August 03, 2018 @10:55AM (#17680368)
I think that's fair. I like to consider three factors when considering an original creator:

1. Did they have nefarious aims?

2. Did they reasonably attempt to consider and solve issues surrounding first and second-order effects of their creation?

3. How did they react to previously unknown first and second-order harms when they found out about them?

The first two, I tend to give creators the benefit of the doubt about. But I've become quite dismayed by the responses of creators to the harms of their creations.

Re:Should computer science researchers disclose negative soc... by slededit on Friday August 03, 2018 @11:46AM (#17680788)
I assume the common response to #3 is that the benefits outweigh the costs. Do you not consider that a compelling argument?
Re:Should computer science researchers disclose negative soc... by vkou on Friday August 03, 2018 @05:46PM (#17683898)
Benefits to whom? The engineer and entrepreneur? Or the public at large?
Re:Should computer science researchers disclose negative soc... by candiodari on Saturday August 04, 2018 @01:54PM (#17687785)
Benefits to management when the public actually believes the culpable will be punished when shit hits the fan.

Tell me, in the VW emissions scandal, did that happen ? No.

Germany literally changed the laws retroactively to avoid holding their own companies to account. This is technically illegal, but the judicial system REFUSED TO LOOK AT IT.

Given that both management of these firms, and government wants to commit fraud when culpability is assigned ... what point is there discussing the rules ? They won't be applied when it matters.

But of course there are large advantages to people believing they will be applied. Like there are advantages to people not responding to having their wallets taken from their pockets, their children kidnapped for sale into abuse, their houses robbed empty ...

This is the US government in action. Other governments, including European, are worse, not better. These are the people that make, and enforce the rules. Why are we discussing whether the right things will be happening ?

https://www.youtube.com/watch?v=eqBAOX6Qegk

Re:Should computer science researchers disclose negative soc... by jonnycomputer on Friday August 03, 2018 @10:45AM (#17680267)
And if her college boyfriend becomes depressed after she leaves and loses it, gets drunk, and hits someone crossing the road while driving, I still hold the thief to have some moral culpability. Moral culpability is shared and distributed across moral agents in time and space, as some function of causal distance and intent.

It is the second word, intent, that is the hang up. If a person hurts someone but it was not their intent to do so, that person is not typically to be held morally responsible. So, at least in the western concept of moral culpability, intent matters. But... people also have a responsibility, a responsibility to try to anticipate the consequences of their actions. One cannot shield oneself from culpability by intentionally remaining ignorant. I think that engineers avoid thinking about these things, not out of humility, but because its in their interest to do so.

Re:Should computer science researchers disclose negative soc... by slededit on Friday August 03, 2018 @11:04AM (#17680446)
> Moral culpability is shared and distributed across moral agents in time and space, as some function of causal distance and intent.

Absolutely agree.

> I think that engineers avoid thinking about these things, not out of humility, but because its in their interest to do so.

This is perhaps the reason we differ. My experience has been that the vast majority of technologists want to make the world a better place.

I believe you see the industry is filled more with people like Wernher von Braun who want to build something cool regardless of social cost. At the dawn of the social media revolution the dominate theory in tech circles was that information shall set you free. The people making it did not come into the industry for status, being a nerd was still a social negative. Today with the ever rising salaries things are changing.

Perhaps you are right that as the industry matures the sphere of liability should increase. I would still argue that the suggestions in the original article swing that much too far. We shouldn't prevent scientific discoveries merely because engineers may build something bad with the information. On the balance scientific discovery has improved the lives of everyone by many orders of magnitude - even if its distributed unevenly.

Re:Should computer science researchers disclose negative soc... by glitchc on Friday August 03, 2018 @10:18AM (#17680022)
That's what standards are for. The threshold is determined by harm. Software practices are still in their infancy, which is is why it is hard to take them seriously as mature disciplines. Now that software is having a direct impact on people's lives on a large scale, it's time to set some standards, starting with autonomous driving and mass surveillance. Then have people trained to understand those standards and adhere to them as best practices.
Re:Should computer science researchers disclose negative soc... by 2close4comfort on Friday August 03, 2018 @12:15PM (#17681057)
If you do it knowingly yes...you have the ability to say no. Do you think you are not a victim, or are you just complacent enough that as long as you have X you are fine and I can going knowing I was a good person. You dont have to create victims you do have an obligation to prevent them.
Re:Should computer science researchers disclose negative soc... by slededit on Friday August 03, 2018 @10:02AM (#17679894)
> If you know your software will increase emissions to illegal levels, and still write it, you are culpable.

Again a first order effect

> If you write software for autonomous cars that is not foolproof at detecting pedestrians, you are culpable.

Again a first order effect connected directly with the immediate goal.

However if you write communications software and people use it to say bad things, those are second order effects. You provided communication software that works as advertised and has beneficial purposes. Others misused it.

Re:Should computer science researchers disclose negative soc... by scarejunba on Friday August 03, 2018 @10:55AM (#17680365)
Is the guy who invented valves responsible for the Holocaust?

Not trying to be inflammatory. This is specifically trying to find if you think there's a point where culpability disappears. I would appreciate a yes/no answer. There's no nuance to the question. I'm not talking about the specific valves, just the notion of a valve.

Re:Should computer science researchers disclose negative soc... by Milner08 on Friday August 03, 2018 @09:59AM (#17679869)
Do you understand the difference between a first order effect and a second order effect?
Re:Should computer science researchers disclose negative soc... by dekhn on Friday August 03, 2018 @10:15AM (#17680008)
I don't (btw, I'm a software engineer and scientist with extensive training). So I looked it up.

Did you mean first order or second order kind of like the way physics people mean it (direct linear relationship with strong effect on the unknown variable). Or the way that MBAs mean it (they have their own definition).

Or did you mean structural engineering, same as physics: https://www.quora.com/In-structural-engineering-what-are-fir...

I think what you probably mean is a colloquial interpretation, where first order means something is directly causal in an obvious to see way, where second order is more of an indirect effect that occurs through complex dynamics.

Either way, I don't think those terms are well defined, and they're kind of complex enough that using them to argue for morality, and calling people out for not knowing your definitions, makes you look caddish.

Re:Should computer science researchers disclose negative soc... by jonnycomputer on Friday August 03, 2018 @10:29AM (#17680113)
I agree.

I doubt that they could mean causally indirect. I think it must mean something like: not used in accordance to their the engineer's intent, especially when that intent covers a a general affordance (e.g. affords communication over long distances), but is being judged for a more specific affordance (affords communication over long distances to order a terror attack). I dunno. I'd have to be a philosopher to work it out.

Re:Should computer science researchers disclose negative soc... by learc83 on Friday August 03, 2018 @02:41PM (#17682435)
I think that's spot on. When people say something is a first/ second/nth, order effect they are really just arbitrarily drawing discrete lines in a continuous chain of causality.

The problem of where to draw those lines is so difficult that legal systems resort to constructing tests based on whether a "reasonable person" could have foreseen the specific consequence of an act.

Re:Should computer science researchers disclose negative soc... by deklerk on Friday August 03, 2018 @10:53PM (#17685108)
Those are also, as the OP has repeatedly addressed: first order effects.
Re:Should computer science researchers disclose negative soc... by onceKnowable on Friday August 03, 2018 @09:56AM (#17679854)
Yeah but that’s a different argument to what you’re replying to.

If that civil engineer sold or allowed (for any reason from negligence, insufficient security protocols, malice, ignorance etc) blueprints for his design to end up in enemy hands, he most certainly would be held liable.

The thrust of that point is the very idea that software engineers on projects involving user data, regardless of how and what they think they are building, are not simply building “bridges”. They are building systems that have the potential to be misused as mass-surveillance apparatuses. And they need to build their systems accordingly, with appropriate data-security and with acknowledgement that their work could leave them personally liable to action should their work be found to be used as a threat-vector towards their users.

The current attitude of “well people know what they’re signing up for and since they signed the User Agreement, we don’t have any liability here” towards users in the industry is sick.

Re:Should computer science researchers disclose negative soc... by smoony on Friday August 03, 2018 @10:30AM (#17680127)
I literally signed up for HN, something I've been uninterested in doing, just because of this comment.

Saying that engineers need to make responsible decisions in their software design is one thing. But you imply that misuse is a liability for the designer? So if someone takes an engineer's code and modifies it for malicious intent the engineer is liable? That's absurd.

That's like saying the person who designed the airplanes used in 9/11 are partially liable for 9/11.

Re:Should computer science researchers disclose negative soc... by onceKnowable on Friday August 03, 2018 @11:04AM (#17680453)
Absolutely, if that data is stolen due to the designers’ neglect in the security aspects of the systems they signed off as “adequately designed”.
Re:Should computer science researchers disclose negative soc... by smoony on Friday August 03, 2018 @11:50AM (#17680832)
Yup! It just concerns me since this topic has a lot of great discussion but many people are missing the distinction between different types of effects. Sorry if I misunderstood what you were saying! For others who are confused what I mean...

Consider:

The person who makes a car that someone uses to kill someone by running a bystander over. The engineer isn't responsible.

The person who messed up the Prius with the issues where the gas pedal or whatever didn't work. The engineer IS responsible.

The first example is analogous to a software engineer writing image recognition software for a safety app. Then someone maliciously taking the software and using it to discriminate via misuse. The engineer is NOT responsible. If someone takes your software (could even be open source) and applies it or modifies it in a malicious way they are responsible not the engineer.

The second is example is where if an engineer makes a widget app and has a vulnerability but signs off on it, and then widget purchaser credit card info is stolen. The engineer is responsible for negligence and should be liable for the misuse.

Re:Should computer science researchers disclose negative soc... by onceKnowable on Friday August 03, 2018 @03:02PM (#17682646)
No, yeah sorry, I’m obviously being super brief here to just get the point across without writing a thesis on my phone :)

Although, predictably enough, I followed up with more thesis length posts to clarify my point! Namedropping einstein too, who do I think I’m impressing? (But Einstein is relevant to this debate, although he made the crucial mistake of only informing the government and not informing the public. Obviously this was well-intentioned on his part and not malicious at all but it’s a lesson that every developer of new innovations needs to take onboard.)

This isn’t about specifically demonizing “engineers” or innovation. Or even to do with liability where “that engineer developed a car that murdered someone”. Liability laws are robust enough to figure out whether the gas pedal was functioning correctly, the driver is at fault, or if not, the engineer (or rather, the company he works for) is at fault.

This debate is about broader strokes: should developers of new technologies be ethically bound to inform both politicians & the public about their innovations, specifically so that, after a public debate on the potential negative consequences of that technology, the public can then demand their politicians to produce robust laws protecting the public from misuse of those technologies. (I say yes, I know it’s tough because I love just developing cool new shit too, but we developers have got to take a step back and realize the future implications of what we make. Data gathering, manipulation and retention is a ticking time bomb. And who knows what’s next.)

Another example is facial recognition, it’s depressingly funny to see experts who know so much about the technology proclaim it to be no big deal without understanding the ramifications of living in a society where your every movement is tracked and potentially monitored. That is a literal police state, and the US constitution has amendments made hundreds of years ago specifically to outlaw such actions to protect the public at large, both from private companies tracking their movements and to protect the public from the government itself. To have all of that progress in the name of “facial recognition will be awesome because you can login to your phone quicker” is not a good move because once that technology is in the wild, until laws catch up to robustly protect the public, who knows what will be done to the public at large with that technology. Ditto for “who cares about data retention and website tracking, it makes marketing so much easier!” and “don’t worry about your DNA being stored and sold by ancestry sites indefinitely because it’s so cool to know that you’ve got a 7th cousin living on a different continent”.

Re:Should computer science researchers disclose negative soc... by candiodari on Saturday August 04, 2018 @01:50PM (#17687773)
> engineers are investigated for culpability

Funny how you believe that. Remember the Miami bridge collapse ?

Workers on the ground misplaced one of the supports, and then didn't stop work when loud noises started coming out of the concrete. This was not documented wrong on the design, it was those same companies first mismeasuring the location of the supports, then simply moving them around when they didn't fit.

Who's culpable ? The designers, of course.

Or take Dieselgate. European, German and French car manufacturers systematically and purposefully installed software in the cars to commit fraud on the testers (the government testers knew that this was happening).

Who's culpable ? A single engineer, of course.

Not the regulators that knew what was happening.

Not the European investment bank, who had seen reports on this.

Not Volkswagen management, that had built several facilities explicitly for committing this fraud.

Let's stop pretending the problem with engineering will be solved by assigning blame to engineers. It won't. It can't.

Large scale fraud, committed by management and government is the problem. It cannot be fixed with engineering.