[ENOTTY]

Is this really a win for DreamHost (and other internet service providers)?

> DreamHost has been deputized to redact sensitive information

If DH was deputized to do this on behalf of the government, what limits are there to deputizing DH to do something else, possibly more nefarious, on behalf of the government? Why can't the DoJ now "deputize" Apple to produce the iOS with the backdoor?

Also important, who pays for the employee time for this? What about the opportunity cost of moving an employee off of her main duties onto this other duty that has no revenue benefit? Did this ruling just create an unfunded mandate for private businesses?

> We see this as an absolute victory not just for DreamHost, but for online service providers throughout America and for internet users around the world.

I think this statement requires far more analysis before it can be made.

EDIT: Oh good, Orin Kerr has started tweeting about this. I'd trust his judgment on the legal matters more than my armchair lawyering. https://twitter.com/OrinKerr/status/917923510462435328

[foolfoolz]

they could have appealed again. what is the cost of their legal team?

complying with laws and regulations is a cost of doing business in the any country

[ENOTTY]

I think lawyer time is quantifiable so that's one thing.

But the cost of moving a developer over to satisfy the DoJ's request is practically unquantifiable. Say DH has a dev team of 10. One of them moves over to implement the DoJ search protocol and develop redaction scripts. Do the other 9 now work this person's workload?

Or does DH bring in a new developer? Now DH has to train this person up. We all know, as programmers, that a new developer to a team induces a temporary drag on performance.

Anyways, I think Apple covered this hypothetical in their response brief to the FBI request.

[krisdol]

Again, this just sounds like the cost of doing business. You’re not always going to be able to have everyone working on the ideal goals. Sometimes a developer will have to be working with auditors (be they from the private or public sector) or lawyers on something other than their typical project.

I also don’t think a search protocol would be a part of this request, as much as a dump of redacted data.

[dangero]

Another good example of this is an IRS audit. I went through one the first year I setup my business. They said it was a "random" audit, meaning not based on any specific findings. I had to put all of my small business resources (me) onto defending the audit for probably 40 hours. In the end, they found nothing, so it was just purely a resource drain.