The Ghandi Gambit Defense #
Posted Saturday 22nd March 2008 17:27 GMT
The audit trail of access is sometimes more important than the actual information stored. It is also something that most organisations do not like to release.
If we really want to stop id systems, then if we all on mass request the audit trail of access to our records, it should make the economics of keeping a centralized id database unworkable, especially combined with repeated automated requests,
If unathorized access is found then we form a class action and sue for damages for all those affected. And I am fairly sure they will be a lot of it, curiosity is a problem with those tasked in keeping front of house, and who only require the minimal level of access.
They will probably try and instigate a charge system for the audit logs to minimize request, but this should also increase the damages awarded and once the first case is won, also make the argument for refund requests. Both the snooper (cracker) and those in charge of the miscreant should be personally fined, along with all those up the line.


