People (like you!) who become knowledgeable about information security technology wield considerable power. How they use that power - for good or for ill - is governed by a complex mix of psychological considerations we refer to as cybersecurity ethics. Those values guide an individual or organization when making decisions involving technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access - but that can also be used to exploit those same things!

You may have heard or seen in the media last year that a research firm allegedly accessed 50 million Facebook user profiles improperly. Facebook CEO and co-founder Mark Zuckerberg apologized for the social media giant's role in what he calls the Cambridge Analytica situation. Facebook contended that its privacy enforcement technology worked exactly how Facebook built it to work, but that bad actors - like Cambridge Analytica - violated the company's terms of service. On the other hand, Facebook has since changed those terms of service to further limit what information third parties can collect from user profiles - implicitly admitting that its prior terms were insufficient. Facebook also has flooded the media with commercials designed to restore users' confidence in their privacy practices.

(1) In your opinion, who was at fault? Facebook users for not scrutinizing its terms of service and simply trusting its technology to work? Facebook for not taking more care when formulating its terms of service and protecting what third parties can access? Or Cambridge Analytica for realizing there were loopholes in the terms and technology and taking advantage of them, instead of sharing their discovery with Facebook? Provide a rationale for your finger-pointing!

(2) Using a single adjective in each case, characterize the actions of each of the three players: Users, Facebook, C/A. For example, do you think what each group did was Moral? Ethical? Legal? Nave? Something else? Provide a few sentences rationalizing your characterizations.

Major post: Be sure your post meets the following criteria:

-At least ONE 100-word paragraph responding to EACH of questions (1) and (2).

that means, your major post must consist of at least two 100-word paragraphs overall.

-2 sources (one of these can be the textbook if you like).

*You can cite sources using a hotlink or in a standard format like APA or IEEE.