I think Lawrence Lessig talked about something similar in Code, but we're having an interesting discussion in the MacLab.
The problem is this. Our machines rev nightly, and as part of the revving process, we've been wiping all user data. Our explicit policy is that we make absolutely no guarantees about user data, particularly over night. However, the reality of it is, most users are not entirely aware of our policy, and have a tendency to ignore posters, warnings, etc we put up. One of our tutors modified the revving process to not delete files that have been modified within 3 (or any fixnum) days.
I think this is a horrible idea, but others seem to disagree.
The reason I think this is a horrible idea is simple: we are creating conflicting policies. One policy is our explicit one, where we say we don't save user data over night. The other policy is the implicit one, where we in practice will be saving user data for some number of days. Where this becomes an issue is that users are more likely to follow our implicit policy than our explicit policy, because even though they do not read signs, they definitely notice when they see (or don't see) their files from previous days.
So we will then, through our own practice, be implicitly telling our users that user data is stored for some indeterminate number of days, while not being able to provide the level of service/security users will naturally expect/assume (that is, user files can suddenly disappear, and we will simply point at our unnoticed signs).
What really baffles me is that, none of our users are asking us to store data. If they ask and we tell them we wipe the hard drives every night, they understand. Yet by introducing an implicit, unofficial, and un-demanded service, we're jeapordizing users data. It makes no sense to me.
What am I missing?
Posted Tue, July 5, 2005 10:46 by instructions for texas holdem@
From: http://www.texasholdemcenteral.com/
[moderate]