Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Geer Comments On Firing From @Stake

Posted by timothy on Wed Oct 01, 2003 06:38 AM
from the can-you-smell-the-ionized-air dept.
dwbryson writes "Last week Dan Geer, co-author of the CCIA Microsoft security report, was fired from @stake for expressing 'values and opinions [of the report] not in line with @stake's views.' Now Geer has been talking to eWeek and comments on his dismissal."
+ -
story
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by dmayle (200765) on Wednesday October 01 2003, @06:43AM (#7102263) Homepage Journal

    "The Venn diagram of facts doesn't intersect. The intersection of all of those statements is the null set," Geer said.

    Ahhh, one of our own... :)

    • Hehe, I thought that was pretty funny. Makes you wonder how he does normal stuff like if he ever broke up with a girlfriend.
      'See honey, this circle represents everything I want and this other circle represents you. Notice how the intersection of these two is the null set?'
  • by AndyFewt (694753) * <slashdot2@throwaway . c oldfyre.net> on Wednesday October 01 2003, @06:47AM (#7102273) Journal
    I guess Geer should read "The Surprising Benefits of Being Unemployed" from earlier. Perhaps it will help?
  • Unfortunately... (Score:5, Insightful)

    by HBI (604924) <pelander@e y e m ud.com> on Wednesday October 01 2003, @06:51AM (#7102289) Homepage Journal
    This one is going to pass just like every other Microsoft injustice.

    I'm ashamed of our academics, as cited in the article. He apparently went to get 9 to sign onto that paper and all declined because of funding issues.

    What's the point of tenured academics if they are going to be afraid of losing corporate grants and therefore are squelched?

    Yet another reason I hate academia, besides that one class...
    • Unfortunately, acedamia is the only place where you'll find non-consumer-driven research.

      I guess it's corporate-shaped, instead.
    • by rknop (240417) on Wednesday October 01 2003, @07:08AM (#7102355) Homepage

      I'm ashamed of our academics, as cited in the article. He apparently went to get 9 to sign onto that paper and all declined because of funding issues.

      What's the point of tenured academics if they are going to be afraid of losing corporate grants and therefore are squelched?

      The problem isn't the academics. The problem is the funding.

      If you're an academic, there's tremendous pressure to get external funding. That's usually a tenure critereon nowadays; unless you demonstrate an ability to get external funding, you won't get tenure. Even after you get tenure, there's huge incentve to get external funding. For instance, the amount of time and freedom you have to do your research (versus other duties) is often directly linked to the amount of external funding you can secure.

      People are surprised sometimes when I tell them that I need to figure out how to get grants to support my research. "Doesn't the University support your research?" Only in that they provide me a 9-month salary, an office, and administrative support-- which, I grant you, is real support. But it's not sufficient; it doesn't pay any grad students or post-docs, it doesn't pay any publication fees, it doesn't pay for any travel, it doesn't pay for any equipment.

      If you're in a field where corporate support is expected, then you're caught in a bit of a catch-22. You're supposed to have academic freedom, and indeed once you have tenure the University can't fire you. But if you want to be able to keep doing your research, you need to get funding, and as such you are in a position where you can't say something that will offend whatever corporate source of funding you depend on.

      If you want to fix the problem, fix the way that academic researchers are funded. Don't just do away with them altogether, or you'll find that there are even fewer people who can speak with some sort of credentials who aren't completely beholden to some specific private interest. In other sciences, government funding does alleviate some of the trouble, although I'm not so naive as to believe that one's ability to get government funding through the NSF and such wouldn't be harmed by speaking out against certain influential private interests.

      It's similar to politicians and large special interest groups. No politician who wants to get elected can support an even wise and rational policy (e.g., let's say eliminating drug patents and reforming the way drug research is funded in the interest of lowering overall healt care costs for individuals) if you risk ticking off huge campaign donors, for you will get buried.

      -Rob

    • by muffen (321442) on Wednesday October 01 2003, @07:34AM (#7102482)
      This one is going to pass just like every other Microsoft injustice.

      There is no proof that Microsoft had anything to do with this, and I think they didn't. I believe what he said in the article, he was fired because of the ties @stake has with Msoft, not because they specifically called @stake and asked for him to be fired.

      That being said, this whole thing is bad. I do however have to agree with one of the posts above, that mentiones that although freedom of speech is a good thing, the employer can choose to fire you because you are using that freedom against the will of the company. I guess that is the freedom that the company has (upto a certain point ofcourse).

      It's been said many times before, freedom comes at a price! If you use your freedom, you must be prepared to deal with the Consequences.
      • by timeOday (582209) on Wednesday October 01 2003, @11:13AM (#7104183)
        There is no proof that Microsoft had anything to do with this, and I think they didn't. I believe what he said in the article, he was fired because of the ties @stake has with Msoft, not because they specifically called @stake and asked for him to be fired.
        That's the irony. MS dominance threatens computer security be creating a software monoculture, in which even a single bug can take down 90% of computers. Geer's firing proves that MS dominance afflicts the industry itself; even taking Microsoft's name in vain makes heads roll. This is not the sign of a healthy industry or a competitive market, but rather a dictatorship - a political monoculture.
  • free $peech (Score:3, Insightful)

    by lanswitch (705539) on Wednesday October 01 2003, @06:53AM (#7102297)
    This shows once more that Microsoft has become too dominant. If even the security companies can no longer speak freely without endangering their existence (and that's why they fired Dan Gear) then what kind of free speech do you really have? Only the kind you can buy...
    • s/buy/get paid for/
    • Re:free $peech (Score:3, Insightful)

      by Anonymous Coward
      Actually, this just destroys @Stakes credibility. They are now bought and paid for robots of Micro$oft. Which means we can't get reliable security information from them.

      We need diversity in computer operating systems. This racist computing has too many problems and the vendor Micro$oft is still not fixing the security issues. (Just mending it where they get caught).
  • by adamsmith_uk (670868) on Wednesday October 01 2003, @06:57AM (#7102312) Homepage
    Irrespective of whether Microsoft had anything to do with the firing, a company such as @stake should stand by its employee and its own credibility...

    Why should companies trust future research from @stake? Should existing employees be watching their backs? Bad smell all around!
  • You go, Greer (Score:4, Interesting)

    by drpickett (626096) on Wednesday October 01 2003, @07:13AM (#7102378)
    He called it perfectly

    His job is to spot the trends coming in the future - And his employer gags him for doing his job - I stand by my remarks in the previous thread on this topic - @Stake will have a very hard time attracting a decent replacement candidate, and their research will now always be suspect...

    ...at least for the two weeks that it takes modern society to forget that it ever happened

  • What happened l0pht? (Score:4, Interesting)

    by navyrain (171256) on Wednesday October 01 2003, @07:28AM (#7102448)
    @stake used to be "l0pht heavy industries", a nifty little group of hackers toying around. (www.l0pht.com [l0pht.com]) Now they're all business. Lame. "What happened l0pht? You used to be cool."
    • Umm, if memory serves, the l0pht was, well, absorbed into @stake. That is, what was the l0pht became part of @stake, but @stake isn't just "the legitimate front for the [cr|h]ackers formerly known as the l0pht".

      Remember their tagline? MS: "That vulnerability is completely theoretical." The l0pht: "Making the theoretical practical since (some year)." I'd be willing to bet that not all the people within @stake are very happy about this decision, just like there's probably a few VeriSign employees that are
  • Live and Learn (Score:5, Interesting)

    by spacerog (692065) <spacerog@spacero ... t minus math_god> on Wednesday October 01 2003, @07:36AM (#7102489) Homepage Journal

    Whether Microsoft had a hand in his demise "will be forever impossible to ascertain," Geer said. "One might say communication wasn't necessary. There's a school of thought that says that a phone call wasn't needed. The more powerful you are, the less likely you are to have to pick up the phone. At most, you could call it plausible deniability."

    I am surprised that Dan has decided to publicly say anything. This would seem to indicate his relutcance to pursue the matter in court. Or maybe he just hasn't spoken to a lawyer yet. Or is this opening slavo?

    Before the obvious referances are made let me just say (again) that what @stake has become is in no way related to what L0pht was. I think there is only one of us left (Weld), everyone else has seen the writing on the wall and moved on. I just hope Dan is able to put this behind him soon and move on as well.

    - SR
    spacerog AT spacerogue DOT net
  • Interesting Note (Score:4, Interesting)

    by 4of12 (97621) on Wednesday October 01 2003, @07:42AM (#7102528) Homepage Journal

    As an example of the kind of behind-the-scenes influence that large vendors have, Geer cited his efforts to find an academic security expert or two to sign on to the paper on software diversity. After contacting nine people and striking out each time, he gave up.

    "All of them said it was too hot for their position," Geer said. "They enjoy the free speech benefits of tenure but not necessarily those of funding."


    His experience is interesting; it shows just how there are limits, even in academia, to how far people are willing to go in their pursuit of the truth.

    Microsoft might not have an irresponsible security record due to business practices, but the hypothesis put forward by Geer and the others should be examined carefully and openly both for where it might errors, and where their hypothesis fits the facts. That's the way all scientific progress is made.

    And he's right, too, about a phone call not being necessary. Conditioning, and seeing what happens to people that take a stand in opposition to some powerful force, is enough to convince most people that self-censorship, if not the better part of valor, is certainly the better expedient for maintaining your comfort.

  • by Uninvited Guest (237316) on Wednesday October 01 2003, @07:45AM (#7102540)
    The article mentions the security consulting firm Geer started in the 90's. Geer knows how to start and run a company. By now, there are bound to be folks losing faith in their own tenure at @Stake. Perhaps this firing will be the birth of a new security firm, founded by Geer, former @Stake employees, and experts that declined to sign on to the security paper. With enough credibility, the new company might lure some of Microsoft's business away from @Stake.
  • by erroneus (253617) on Wednesday October 01 2003, @07:49AM (#7102565) Homepage
    First of all, Geer just became a martyr of sorts. As he is practically the creator and one of the more important celebrities in the security field, he's not wanting for job offers or opportunities. He'll probably just make his own.

    Whether or not Microsoft had anything to do with his firing, directly or not, is somewhat irrelevant. Sure it adds more fuel to the "we hate Microsoft" fire but outside of that it proves nothing except that @Stake is driven by their sponsors and not by the ideal of exposing the truth. This makes @Stake a security company that isn't secure in its convictions. Security you cannot trust.

    Geer, on the other hand, has proven himself to be unshakeable from the pursuit of the truth. He is unshaken by political and financial forces and the industry will see that, like it or not, his opinions can be trusted.

    Generally, this is a good thing for him and the business of security. The more high-profile these matters become, the more public opinion will influence commerce in these matters.

    It is hard for the American heart to forgive even perceived violation of the free speech ethic. We believe we can say whatever we want whenever we want so long as it is the truth. The public perceives the "breech" of the free speech ethic as a bad thing. "Oh look honey, this bad company fired this man because he was doing what he was hired to do and they didn't like the truth." That's the message most people will receive in this case I believe.

    They probably fired him because they knew they couldn't get him to retract anything he said.
      • by _Sprocket_ (42527) on Wednesday October 01 2003, @10:09AM (#7103581)


        I am in the millitary, if I were to say that "G. Bush is a moron" I can go to jail. I do not say that, it is just an example. He maybe a little gungho though :)


        I spent 8 years in the USAF. I completely disagree with that statement.

        It might be worth stressing that US military members do give up many of the rights they have sworn to protect. They becomes something other than a US citizen. But they do have certain rights and duties.

        You, as a member of the US military, are not allowed to attend political events or make political comments in uniform. Doing so would imply an official position of the US military. But you are (or at least should be - I certainly was through my career) encouraged to take part in the political process. That includes being involved in legal political activity, holding a personal opinion of our political leaders, and voting - be it for or against a sitting president.

        Go ahead. Hold the opinion that Bush is a moron. Devote some of your off duty time to campaign against his office. Get up in front of people and state your opinion without rank or tittle.

        But he is still Commander in Chief and you will follow all lawfull orders coming from his office.

        One final comment - just because you are in the military, it does not excuse you from the duty of having your own mind. I'm not sure what branch you are in but in my training the concept of a lawfull order was stressed again and again. One is required and duty bound to review all orders given by superiors and ensure that they are, in fact, lawfull orders. In short, one is responsible for one's own actions.

        I had a few superiors in my military career that seemed to forget this concept. They took every utterance of a political leader on CNN as both as binding as an order and a personal guide to their own opinions. These are the ones I most fear. Thankfully they were few and far between.
  • by PepperedApple (645980) on Wednesday October 01 2003, @08:34AM (#7102898) Homepage
    Here's an idea that I don't think has been explored much... maybe the big problem was that he said the opinions were his own and not @stake's.

    If I worked for Adobe, and then decided to release a photoshop clone in my spare time, and claimed that it was my own program, not Adobe's, I think that there would be some problems.

    In his job as a security expert, I'm sure that he used @stake's resources and expertise in coming up with the paper. So technically he might not have the right to say that the paper is his own and has no affiliation with the company.

    Perhaps if he had brought the paper to his employers and gotten their approval, they could have released it as part of a security report and sold it. Basically he took something that he made for his company and gave it away.
  • Of Mixed Minds (Score:3, Informative)

    by Effugas (2378) on Wednesday October 01 2003, @10:11AM (#7103596) Homepage
    I was at Toorcon, when Bruce Schneier was talking about this very event.

    It was pretty painful, but not like you'd think.

    "For those who don't know, Geer wrote an article talking about the risks of monoculture that situations like we have with Microsoft expose."

    Lets look at the article's title:

    >

    CyberInsecurity: The Cost of Monopoly

    How the Dominance of Microsoft's Products Poses a Risk to Security


    Does anyone see the word Monoculture in there? No, just monopoly. It's up there next to "Dominance", "Cost", and "Insecurity".

    Somewhere along the lines, this paper jumped from technical analysis to political polemic, and Geer got the political response. Don't get me wrong: The vast majority of the conclusions reached in this article have way more than a grain of truth in them. But the degree to which Schneier backpedalled on the tone was pretty noticable, and stood in stark contrast to the near-rage of the paper itself.

    Would Geer have kept his job if the paper was more objectively written? I don't know. But I sure note what I see reported on doesn't match what I read in that paper, and I have to wonder why.

    Yours Truly,

    Dan Kaminsky, CISSP
    DoxPara Research
    http://www.doxpara.com
  • by theCat (36907) on Wednesday October 01 2003, @12:31PM (#7105071) Journal
    It seems to be happening that matters which begin as purely technical/scientific become marketing and sales issues. Witness what happened to the Darpanet when it went public and became the Internet we know today. At the time I was studying CS in college and I recall academics and government types where wringing their hands over the inevitable "dumbing down" of the technology in favor commercial applications and services to the public. Read that as marketing and sales. And we can see where that got us; mom and pop on broadband but with "personal" technology never meant to leave the secure isolation of the living room.

    Although viruses got their start on the floppy disk vector (recall boot sector viri?) they have come into their own throught the vector of the Internet. That machine could not have been better built to propogate malware even if one had set out to do so, but the only reason it can actualy do so to the degree it has is because of the brain dead operating systems (and rookie sysadmins) at the remote ends of the pipes. And the monoculture of both is at the heart of the problem. I use MacOSX on broadband, but do you seriously think I have to worry about any of this? No I do not.

    Enter security. Now an entire industry has emerged to counterpoint the monoculture, an industry devoted to what would simply have been the day-to-day work of any competent sysadmin just 10 years ago, except that today there are few competent sysadmins. Rather there are hordes of desktop drones massaging M$-based networks across the planet, only incidently linked each to the other by an Internet of which they have no particular understanding nor much interest (a direct reflection of M$'s own utter indifference.) It has all become a dense, dry, sprawling monotypic tinder of light twigs and leaves awaiting the match. The security industry is built around that monoculture of neglect and ignorance, would have no purpose without it, and yet is directed at undoing what the monoculture has done to, and via, the Internet. And since M$ is just a marketing and sales juggernaut with its roots deep in the fertile manure of personal computing, should anyone be surprized that here again the network technology and science are falling under the tracks of the M$ Panzer divisions? I should hope not. M$ did not become a monopoly by being easily distracted with technical details.

    I can see no solution but one. Government will not act because politicos are hip to marketing. Regulators will not act because they are afraid of the politicos and like their cushy jobs. And people will continue to select technology out of innocent ignorance. M$ spends freely, buys strategic friends, revises history, and builds outward seemingly oblivious to the coming train wreck because they know for a fact they will just walk away with profits intact; they are afterall about personal computers, and not much more. What is the Internet to M$ except a problem? They distribute their software on CDs and only security patches over the Internet to defend their CD-based software from Internet attack. I should think they would be twice-pleased if the Internet and everything associated with it, including OSS, simply vanished in a general conflagration.

    The one solution? I propose we take a clue from Nature and let it burn. We don't need these weeds growing here anymore, burn them out and their seeds as well. The network will survive because the network is not the problem, while the strictly "personal" computers will burn to the ground at the ends of the pipes. Then perhaps something more robust will spring up where they were. It might even be that M$ has the very thing waiting in the wings, ready to roll out, "Windows ProSecure" or some silliness. Fine with me. But if they don't then they are fools and their undoing will be of their own devising.
  • by JRHelgeson (576325) on Wednesday October 01 2003, @02:26PM (#7106587) Homepage Journal
    Symantec now owns the Bugtraq list. Therefore the list is now moderated, Symantec will delay any posting information that they deem profitable. This has made the information on the Bugtraq list questionable. It is no longer an unbiased source for information security.

    With the termination of Geer, @Stake has shouted from the rooftops that they are NOT an unbiased source for information security.

    When I write a security paper, I write it from the perspective of an independant auditor, which I am. Someone from the outside looking in. I don't CARE what someones intention was when they created an insecure system. If I found it to be insecure, I let them have it.

    I just lambasted a luddite CEO of a major corporation for not making information security HIS #1 priority. I told him that the insecurity of his network was his problem, a management problem, not an IT problem. I railed on him for two hours in a meeting last monday... and he appreciated it. Was my report one-sided? Your damn right! I don't care what his intentions/perceptions are or were. What I told him was the pure, unadulterated and unvarnished truth. As painful as it was - it was true.

    He's a good CEO and changes are being made. Now, if this same info were coming from an @Stake consultant: The information would now be suspect as being slanted in M$ favor, because 'they help pay our paychecks' and we can't speak out too strongly against them. @Stake now takes the side of Microsoft.

    Was there any lies in what Geer wrote? No... Was it the painful truth, backed up by facts? Yes... Did the truth hurt? You bet. And it needed to be said.

    I think that the political ramifications taken out on Geer has just signed the death warrant for @Stake.

    • While it's true MS is a tad "forceful" diversification isn't the real solution to the problem.

      Having sys-admins who do their jobs instead of whining about patching will fix *many* windows related problems.

      I think it's a matter of using the right tools for the job. Secretaries shouldn't have to learn userland *nix just to type up a TPS cover sheet for their weekly memos.

      Likewise some network admin shouldn't be forced to use WinXP just because the latest .NET makes every XML transaction cost less [or whatever]....

      That being said you can run GNU/Linux and get rooted just as easily as you could with Windows if you don't patch your system.

      Tom
      • I did a bit work looking at the process of an assembly line. The situation was the standard problem of things being too slow, quality being too low, and the requirement that throughput increase 10% month. When I interviewed the supervisors the response I got was all the processes were good, and that they had used the processes to produce product in the past.

        The supervisors blamed the workers for being stupid and lazy. The supervisors of course hadn't done any real work in a couple of years. When I ac

    • Microsoft deserves it's reputation if it fires people just for speaking out. This man did not deserve to be fired just for saying what everyone knows: that Microsoft is monopolistic.

      RTFA
      Microsoft didn't fire him, but they may have been involved.
      And his paper didn't say that Microsoft is monopolistic, it said that lack of diversity is a bad thing, be it all MS or all Linux or whatever.
      • Reading the article a bit more closely and you find that he blames Microsoft despite saying they didn't do anything to get him fired.

        "The more powerful you are, the less likely you are to have to pick up the phone" he said. In other words, MS didn't do a thing, but its still their fault.
        Hey, it could have been the government, they dislike people criticising the security on the systems they use. Or the Illuminati, don't want to upset them you know, and Bill Gates is quite high up in that organisation...

        Wha
        • by rknop (240417) on Wednesday October 01 2003, @07:11AM (#7102367) Homepage

          What kind of wooly crap is this? I mean, if I criticise my biggest customer, or my company's profit base, I think I can expect my manager to have 'words' with me at least. This is just another MS-is-bad-and-I-don't-care-if-that's-true-or-not story.

          If you claim to be security consultants who know security, rather than PR consultants who use words like "security" to help advertising, then you do very poorly for yourself by so obviously and publicaly squelching any appearance of having said something potentially negative about the security of one of your largest customers.

          The point is that Microsoft's huge power in the industry appears to be making it impossible for real security firms to exist. As such, we should all be leary of any such's claims, and wonder if in fact they are really PR firms who use words like "security".

          -Rob

            • I were Microsoft... I would be out there trying to hire the guy to head up my security

              You weren't paying attention last week [slashdot.org]. Yes, the report was critical of Microsoft's shoddy security record. But the main concern is that any software monoculture is dangerous. Geer's #1 recommendation is to use a mix of (non-Windows) systems, which Microsoft obviously can't approve (short of being broken up by antitrust).

    • by gascolator (671640) on Wednesday October 01 2003, @06:49AM (#7102279)
      Let's get it right. This is not a 'free speech' issue. It is an corporate and scientific honesty issue. In fact, it was the employer excercising their rights to fire an employee for making statements they didn't like, and it affirms, rather than denies the Bill of Rights. You may not like that, but that's the way it is. The First Amendment restricts government, not employers. Therefore, Gere's employers were within their Constitutional rights to let him go for not toeing the company line. In doing so, they discredit themselves and the rest of us can exercise OUR rights to take anything they say with a grain of salt, realizing as we do that they're in a certain corporation's pocket. You can wave the Constitution in the face of private industry all you like...but it doesn't apply, and it just gets tiresome.
      • by beamin (23709) on Wednesday October 01 2003, @07:03AM (#7102336)
        You are exactly right on this. The only damage done here is to the credibility of @stake and to Microsoft, and that is self-inflicted.

        Was it right for @stake to fire Geer? I don't think so. However, it's not illegal (as far as I know; IANAL).
        • You are exactly right on this. The only damage done here is to the credibility of @stake and to Microsoft, and that is self-inflicted.

          The biggest hit is to the credibility of the authors. The report was a baddly written crock. The only reason it is popular on slashdot is the choice of target. In terms of its arguments it is Matt Drudge or Michael Moore rather than Stephen Jay Gould.

          I could not find a single original thought. You can find more interesting arguments in an average slashdot post.

          It is no

            • >The report was a baddly written crock
              This may be true -- I haven't read it.

              But you think that on the basis of a slashdot discussion you have enough information to take on someone who did read it? The paper is online, it is not exactly hard to find.

              There is absolutely zero reason for a paper intended to summarize problems with a company's products to contain "original ideas".

              The title of the report claims to be addressing national security issues. The report itself only considers a single softw

      • by jeffasselin (566598) <cormacolinde&gmail,com> on Wednesday October 01 2003, @07:17AM (#7102391) Journal
        In fact, it was the employer excercising their rights to fire an employee for making statements they didn't like, and it affirms, rather than denies the Bill of Rights.

        But should corporations have constitutional rights? Like individuals?

        Considering that the avowed objective of any corporation is to make money, and no other purpose, they are by definition non-ethical. The individuals that comprise them may well be ethical, but the resulting "virtual entity" isn't. A human being has a conscience, may care about the consequences of his actions; moral, ethical, religious, or justicial. A corporation has no conscience, no morals, and should not be considered equal or superior to a human being, and be given equal rights.

          • Actually, CONGRESS SHALL MAKE NO LAW

            if it isn't specifically outlined in the constitution, you can't pass a law against it. not a hard principle to understand.

            There can be no rights that you obtain as an individual but are denied when you form a group. A group is merely a collection of individuals. Just the same, there are no rights you gain when you join a group and abdicate when you leave one. A corporation is a contract of individuals, who seek a common goal. There are leaders of a corporation who ulti
          • I think you're being a little over-picky here. The legal purpose of a corporation is to limit liability to its owners. This then assumes that its owners are non-management funders. The point of investing is to gain a return. Therefore the lowest common denominator of incorporation is that they exist to make money. The default rules governing directors of corporations make it clear that it is unethical for the directors to cause the company to do anything not in the best interests of the shareholders.
        • Clearly the contract will be key to whether this is wrongful dismissal. My guess that it has something saying that deliberately acting in a way which significantly damages the the interests of the company is grounds for immediate dismissal.

          But the timing is odd. Geer worked his last day on Tuesday, according to @stake. He co-published his paper on Wednesday. His dismissal was announced on Thursday. Unless @stake is saying that he dismissed himself by publishing, or that they had told him on Tuesday n

          • by leomekenkamp (566309) on Wednesday October 01 2003, @08:42AM (#7102950)

            I don't know of a single religious zealot who wants to prevent Darwin's theory of evolution from being talked about

            There have been teachers in US courts of law because they told their students about Darwin. That enough for you?

            The problem the religious zealots have is that the Darwinian's are preventing creationist theories from being talked about.

            Religious zealots do not like science, because there is no 'believing' involved. Also Darwinist, being scientists, do not have as extreme prejudice in discussions as religious zealots. Scientists change their pov when they are proven wrong, they do not run away with fingers in their ears like some others do. Has there ever been a creationist in a court of law for telling about the Adam & Eve story?

            In an education environment, it's quite reasonable to expect that both theories be taught. (Yes, they are both theories. There is nothing scientifically factual about evolution whatsoever.)

            Yes, and the earth existing for only 4000 years is also a theory? No. In no way. A theory is supported by evidence and/or objective reasoning and/or perceptions. Basically the only thing creationists have is: "Well, there are all these creatures, they _must_ have been created.". They never have a decent explanation for exinct creatures (did God make a mistake?), nor for the fact that species change over the course of many generations (God making a mistake again? His design was not perfect), nor for the fact that several million years ago the bio-diversity was much, much lower (God making a mistake again, not having created enough species).

    • by EinarH (583836) on Wednesday October 01 2003, @06:59AM (#7102321) Journal
      This is not as much about free speech as it is about the relationship between employers and employed scientists as consultants.

      We will probably see more cases as this as a higher percentage of scientists are funded directly (in companies) or indirectly (sponsored uni/gov-programs) by businesses.
      As if anyone did not know about it; sustained publishing of controversial research funded by corporations is almost impossible.

      • by AlecC (512609) <aleccawley@gmail.com> on Wednesday October 01 2003, @07:20AM (#7102413) Homepage
        Amen to this - I was about to post on the same lines.

        In many ways the most sinister bit is towards the bottom, where he tried to get a number of academics to co-sign the paper with him. None felt able to. They all had tenure, which is supposed to allow academics to be free of the pressures that make employees keep quiet about problems, but they were afraid for their funding, which comes from industry and is not tenured. An academic who says the wrong thing may not be out on the street touting for work, but with no research funding in an expensive subject like CS, he is reduced to a schoolteacher.

        This is a case where more non-commercial funding is needed. Which usually means goverment funding. But on secutiry issues, the government is also a very interested party and is likely to step on the "wrong sort" of research (e.g. research that might block loopholes used by NSA, but potentially usable by black hats).

        Part of the problem is again the size of one giant customer. If the industry were more diviersified commercially (as opposed to technically), a small organisation could take the risk of offending a proportion of the market in order to be seen as frank an knowledgeable by the remainder. But with M$ being the slarges customer for just about anything, as well as the largest supplier, any profit-driven organisation has to think of its opinion.
    • unfair dismissal

      While I don't really like the idea of someone getting let go for speaking their mind, what's unfair about it? His company clearly has ties to MS, and he jeopardized those ties with his statements. If it were his own company, he could have felt free to say anything about anyone he wanted to, and dealt with the aftermath of his comments on his own. But it was someone elses company... someone who was (yuck) concerned about their business relationship with Microsoft.

      While the first amendment gives every American the freedom to express their beliefs/thoughts and guarantee no retribution from the government, it gives us no protection from employers.

      Here's a proof. Go to your boss. Call that boss every foul word you can think of, and then say you were exercising your freedom of speech. Better yet, do it over an intercom at work, broadening your audience. You will probably be fired, but not wind up in court.

      When you work for someone else, you have to play by their rules. Sometimes those rules allow for changes to be made by going through said company's proper channels, sometimes there is no room for discussion at all. Any way you look at it, they are the ones who have bestowed the job.... not the other way around.

      I think the problem this guy ran into was the size of his audience. Maybe when he spoke at conferences about security and Windows (oxymoron that it is), his user base was a select group, and small by comparison. But in print, your audience can be unlimited, and so can the damages of your statement.
      • by dmaxwell (43234) on Wednesday October 01 2003, @07:10AM (#7102361)
        There's an old adage that says "If you take the king's shilling you become the king's man". @Stake has just loudly announced that they are little more than another Gartner. Why should anyone take any pronouncements they make seriously? Especially since we know they are adverse to offending MS. Someone last week put it best: "l0pht is getting s0pht."

        Anyway, @Stake did not "bestow" the job on Geer. He was a founding member and it become politically incorrect for him to do something he had always been doing. He is correct in that we have a very large problem. When tenured academics scuttle about in fear of MS, we definitely have a problem.
      • by ajs318 (655362) <sd_resp2@earthsI ... inus threevowels> on Wednesday October 01 2003, @07:33AM (#7102473)
        You seem to be implying that the boss is doing a favour to the workers by giving them a job, rather than the way it really is. The workers' labour is worth more to the company than the company's wages are to the workers. As long as I've a hand on each arm and a head on my shoulders, I won't go short. A boss hasn't that luxury .....

        It is still unfair dismissal. As long as his name was on the report, then the report is his words, not his employer's, and if someone can't understand, well, that's their problem. You cannot be dismissed from a job simply for disliking your boss, otherwise there would be many more on the dole than working.

        In my last job, I made no secret what I thought of my boss. My co-workers {as, one by one, they left the company; some had nervous breakdowns, some got other jobs, some were desperate enough that they would forego six weeks' giro by leaving a job voluntarily; one went into what he described as a less stressful job - teaching!} felt the same way. In this job, I'm fortunate to have a boss I get on with really well. Even if I didn't, that would not be grounds for dismissal.

        Also, there is a commonly-overlooked defence to libel, and that is that it was true.
      • by Karl Cocknozzle (514413) <<moc.liamtoh> <ta> <elzzonkcock>> on Wednesday October 01 2003, @07:45AM (#7102542) Homepage
        While I don't really like the idea of someone getting let go for speaking their mind, what's unfair about it? His company clearly has ties to MS, and he jeopardized those ties with his statements. If it were his own company, he could have felt free to say anything about anyone he wanted to, and dealt with the aftermath of his comments on his own. But it was someone elses company... someone who was (yuck) concerned about their business relationship with Microsoft.

        I must disagree...

        @Stake is supposed to be a security research and consulting firm. How is any research out of this company ever to have even one ounce of credibility again? I realize Mr. Geer's paper was not published as an "official" company report, but they were angry based on the fact that his paper might "appear" to be At Stake's opinion.

        So if At Stake is so concerned about ruffling Microsoft's feathers that a report they DIDN'T EVEN WRITE causes the firing of a senior, uber-experienced employee with a vast repository of knowledge to draw on, how do we know their reports aren't already being slanted to avoid offending "partner" Microsoft?

        His firing is tantamount to killing the messenger for a message they didn't like. Sorry, but as an employee I resent the idea that if I do something on my own time and dime that offends somebody inside some business partner's corporate structure, I could lose my job. In this economy, that is a pretty chilling statement, President Bush's assinine assertions that "Everything is okay!" aside...
    • >It's so funny when people get carried away by the
      >expertise they possess in aparticular area, and think they
      >can apply it for an another -especially, when they speak
      >on behalf of their employer.

      RTFAs.

      1) Geer is both well known and well respected inside this field, he was speaking inside of his area of expertise.

      2) He wasn't speaking "on behalf of [his] employer." The paper specifically states that the individuals who signed it represented themselves and not their companies.

      3) From what he
    • well..

      his job was to be right and say the truth, not to be a talking head that takes money and says what somebody other wants.

      at least supposedly, so it gives a real fucklike view of @stake now. why would you consult them when they don't tell you what they really think is the right decision but the decision that suits them for various reasons including commitment to some other big $$$ firm? why wouldn't you go and just read the marketing material by that other firm straight and just skip using them as a m
    • It's a basic rule of employment, accept the money, play by the rules.

      Maybe for you. Actually, I am quite nauseated by the sheer number of people who think this way and accept (and by omission, condone) the unethical behavior of their employers. What's interesting is that these are frequently the same people who frequently complain that corporations are "evil."

      While I acknowledge that I've made my share of mistakes in previous jobs, my individuality and sense of free will (hallucinatory or otherwise) ha