Don’t forget we moved!
https://brandmu.day/
On the utility of Logs, Receipts, and Proof
-
@Testament said in On the utility of Logs, Receipts, and Proof:
Is it weird that, as a Ares game runner, I have literally no idea how to access that information and I have the server password to my game? I just kind of shrug assume if something is wrong, the server owners will let me know.
…or they’ll remind that my card is expired because I changed debit cards and forgot to switch it there too.
No, it’s designed this way on purpose. Someone who knows how to use code to access the database has access to lots of information, but I’d wager that most Ares gamerunners do not fall under this umbrella.
-
@Ashen-Shugar Your point is flawed.
Of course data is being collected; that’s hardly secret; data is being collected to such an extent that it’s monetized to pay for some of the largest companies in the world. Meta and Google are running almost entirely on your privacy.
But what it sounds like you’re saying is that because this data is being collected and we’re all here on the web in apparent tacit acceptance of that social contract, that no one has any ground to stand on in taking issue with how the data collected is accessed or used.
The tldr of your weird hill is: “You don’t like logs? TOO BAD. THE INTERNET, BABY.”
You’re not creating conversation, you’re, as someone rightly said, derailing it with unnecessary pedantry. Stahp.
-
@Ashen-Shugar So let’s see if I can explain why I disagree with a metaphor. This is how your point comes across, to me:
I own a building. A crime happens in my building. I’m culpable for the crime because I own the building.
So I suddenly am expected to a) track what goes on in the building; b) had any control whatsoever about what happens inside the building.
That’s ridiculous, and most certainly not how it works in today’s society, otherwise companies and schools would be liable for the mass shootings that happen inside their areas. It’s an absolutely absurd take.
I reject the idea that I need to tacitly monitor everything that happens on a MU* I run because someone might do something illegal. That’s like saying I should wiretap my neighbors because they talked about where to hide a corpse, because I live in the same apartment complex. Oh no, they did something bad, clearly I need to have been more responsible to make sure it didn’t happen so I could tell the cops, to the point of being unethical and invasive in my methods!
No.
-
@shit-piss-love Sponge basically wiresharked all traffic in and out of City of Hope. I don’t know if that functionality was preserved after the game was moved.
That sounds HORRIBLE, and will make players feel bad, but in practice that sort of thing is completely, absolutely impractical for a person to read unless there’s some urgent need involved.
The more you’re logging, the more impersonal it is.
The worst spying is the personal kind: sitting DARK and following you is far more of an intrusion.
Which is why I said the players would FEEL bad about mass logging: it’s much less of an intrusion than it sounds like.
-
If you’ve got it written in a public, easily accessible and understood form, that you’re logging everything all the time always? That’s fine, go for gold.
If you do it surreptitiously, that’s where the violation is. It’s not the action itself, it’s the lack of transparency that loses the trust. And without trust it doesn’t matter how much data you have logged, nobody’s going to believe you.
-
@Pavel said in On the utility of Logs, Receipts, and Proof:
If you’ve got it written in a public, easily accessible and understood form, that you’re logging everything all the time always? That’s fine, go for gold.
If you do it surreptitiously, that’s where the violation is. It’s not the action itself, it’s the lack of transparency that loses the trust. And without trust it doesn’t matter how much data you have logged, nobody’s going to believe you.
This I will grant you, 100%.
If you log, you need to be upfront that you are doing it. Doing it on the sly helps no one.
If privacy is not guarenteed on the game and that you may log when situations warrent it, you need to be visible about it.
We were on Labyrinth from the start, and to be frank it’s the only thing that stopped my wife and I being considered as accessories from what amounted to statuary rape charges that the abuser was doing on our mush.
It’s an extreme case, but here’s the thing I learned
I would rather invade privacy one million times I would rather annoy and piss off every single person on here. If it would save the innocence of one. single. child.
I hope none of you are ever put into a situation like that. It scars you. For life.
It twists your perceptions of what is truly important. It twists your morals on what you think you knew and what s reality.
It corrupts your beliefs on what is truly evil in the world.
I wish and hope and pray none of you ever go through that.
But it’s partly why I stand so hard nosed on why logs are necessary.
It’s not always about privacy. Sometimes it’s necessary to protect people who don’t even know they need protecting.
Where the line is? That’s up to you to discover.
-
@Ashen-Shugar See, you’re talking from a presumption of good faith.
Half the people here, are thinking about the worst bad actors.
But the problem with the bad actors is they’re bad actors. Not the tools they use.
System administrators have many tools. They are morally neutral.
-
@Polk said in On the utility of Logs, Receipts, and Proof:
Half the people here, are thinking about the worst bad actors.
I’d say that people here think badly about the casual use of a pretty invasive tool, without prior warning, rather than necessarily focusing on ill intent. Not bad actors, just stupid nosy actors.
-
@MisterBoring said in On the utility of Logs, Receipts, and Proof:
This makes me feel like all players view all staff as bad actors by default.
By the same reasoning, wanting to log everything would imply that staff view all players as bad actors by default.
I did not believe that the members of the SAR team who used my yard for training would steal things or trash my house, but I still made them make their own toilet arrangements for when I wasn’t home, rather than let them all have keys.
Also, my experience leads me to be deeply suspicious of anyone who says, “I would never use this thing for ill, but I must have unlimited access to it so that it’d be really easy to do so.”
And what sao says. MU staff will not concretely harm me if they’re reading my private pages about my venereal warts, but I still don’t want them to.
-
-
I’m moving this to here so I don’t completely derail the Witcher game conversation but this whole idea of privacy and logging player behavior is sticking in my craw. I couldn’t define why until @Roz said:
@Roz said in Witcher MUSH Design:
I’m half-stealing someone else’s thought here that was brewing in my mind, but. What your responses have made me worry about is the sense that you think you can kind of – code fixes to player disputes, and you just can’t. And you may be building yourself a false sense of security by adding these tools that aren’t at all going to catch the sort of harassment that goes on. Like, if you build tools that don’t solve a problem, but you feel like they’re solving some of the problem, then I think you’re actually less likely to actually catch and fix things.
I think that’s it - that the idea we can log and “catch” bad actors by flagging problematic words or something is the illusion of safety. I think it’s so important for game runners to instead create an environment where complaints are taken seriously, no matter who is involved or the genders of the characters/players. I’ll never forget the time I finally complained about a player - who, for months, would ‘accidentally’ show up in my room, or page me randomly asking me who I was RPing with and then talk shit about that person, and tried to use my lack of knowledge about the game mechanics to try and get me to have a relationship with her character - and was told that she was “kinda frisky but harmless.” It didn’t make me feel safe, and I never felt comfortable complaining again, and no amount of log reading or word flagging would’ve ever popped her as the creeper that she was. Turns out I wasn’t the only person she did this to. She never got banned.
Anyway the point is, there’s no sure-fire way to catch a creeper and it’s really most important for gamerunners to show themselves to be “safe”. Once you have that, people WILL come to you about stuff, and you WILL catch the creepers, but it takes time to establish that.
-
@bear_necessities The tricky part is establishing that trust. Until that trust exists, and a community is comfortable enough bringing stuff up, there needs to be a mechanism to increase the chance of an issue surfacing ‘on its own.’
-
@bear_necessities said in On the utility of Logs, Receipts, and Proof:
…and was told that she was “kinda frisky but harmless.”
I said ‘jesus christ’ out loud to myself. I’m sorry that went through that.
I think with the privacy, logs, receipts, proof, etc. With all of that, I accept that many games have logs, or logging capabilities. I am aware of Ares’ capabilities on this in particular. But those capabilities don’t exist because Faraday thought that she could catch creepers that way. (I mean, maybe I’m wrong. She can correct me.) They are largely a side effect of implementation of other features, with the added ability to report.
I think if you start out thinking you are going to catch creeps this way, you are setting yourself up for failure.
-
@Tez Thanks, it’s been years now and it’s okay but it’s one of those things you just don’t forget.
Anyway I think the problem with ‘requiring’ logs or receipts is that it is truly impossible sometimes. I maybe could’ve logged some of the pages but at the time I very dumbly believed she was trying to be helpful (even though she was truly trying to isolate me). I could’ve logged the times she accidentally came into my room, but is that a bannable offense? Probably not.
I guess what I’m trying to say is that I don’t think the creepers that bring down games are very overt - it is a process over time, it is based on manipulation of many people. And usually it just takes one person brave enough to say “hey this person is bothering me” to reveal the true intent of a person, but you don’t get that brave person without trust, and you don’t build trust without responding to complaints.
-
@bear_necessities It’s taking off your shoes at the airport.
-
@farfalla The worst thing about taking off my shoes at the airport is that it forces me to wear socks.
-
@bear_necessities But you don’t get complaints without trust? I am trying to come up with a way to establish the circle or at least deal with things until trust is organically established.
-
@Istus I don’t know about how others feel, but if you’re definitely going to log everything, I think you should have a written policy available about how they will be used and under what circumstances they will be accessed.
-
@farfalla Of course. The plan is to ensure that it is a big unskippable wall of text that must be acknowledged before the player is able to do more beyond making an account.
-
@Istus With plans to…? Gradually ramp down the nanny-state?
I’m not sure I see how this works in practice.
Game opens with a big disclaimer that STAFF LOGS EVERYTHING. Let’s assume no one just bounces 'cause lol this is clearly being run by crazy people…
Staff combs through these logs, looking for problems and what? Posts about them publicly? Privately removes people? How does the game find out that the logs are being used to their advantage?
How do you measure when players “trust staff enough” to take the guard-rails off? And then what do you do when someone comes to you with a complaint and no logs?
I guess trying to shoehorn in “trust” by spying on people seems kinda bass-ackward to me.
-
Talk openly about the atmosphere you want to create, give examples of behavior you don’t want to see. When people are acting shitty casually, don’t let it slide in the moment - call it out. “We don’t do that here” is a good phrase. Don’t wait for people to report things to remove someone, if you’re seeing red flags. As a game runner you’re insulated from some of the shitty behavior, but it can still come out - in high stakes GM’d scenes, for example, or in how people try to play your systems to get an advantage over others. Use those moments to demonstrate your own patterns of behavior to your players.