We are well past the era where we maintained the fantasy that the internet was separate from real life. People who are acting out online sometimes also act dangerous IRL and it is therefore prudent to figure out who they are IRL if they've proven to be bad actors online.
to anyone reading this, DO NOT listen to the person I am replying to. Even if this extreme case seems "justified", its all too easy to fall down a slippery slope, where you start doxxing anyone that slights you. I have been the victim of this, its NOT OK.
Here's the thing: they did do that. But the banned person would not move on, and continued to evade the ban and be a pile of misery for everyone involved. "Ban them and move on" is the sort of advice that works great until it doesn't.
If the troll was threatening life or some other crime, then fine do what you need to do. but the person is just essentially being annoying, that is not grounds to doxx someone. if they do not have the skills to keep out harmful users, thats their own fault, they should implement a captcha or some other tactic.
Changing the communications policy of the organization to only allow people a communications forum after they've been vetted might. That's a significant change that puts an OSS project at a severe disadvantage towards gathering support / interest. Also, it wouldn't even work in this situation; the actor in question proved willing to use every communications channel they could find to attack project volunteers.
its not my job to teach people how to police their own forums. nor is it the judicial systems job.
What crime? Be specific. You could perhaps suggest slander, incitement to violence, or invasion of privacy.
High bar to satisfy a case for any of those three. Consider everything a private investigator could do IRL if one retained their services to track down an unknown individual; in general, none of those actions are considered criminal (though the spied-upon person would certainly wish the PI wasn't tailing them).
... but in the presence of persistent harassment that will not cease online, tying the behavior to the person behind the behavior and bringing proper consequences to bear is the only regulatory system that actually works. There's a reason that you can be fined or imprisoned for trying to pull crap like that IRL.
But I am sorry that you were falsely accused. That is a possibility (both in doxxing attempts and in more "traditional" harassment).
False accusation is entirely possible, but it doesn't imply we just let harassers get on unchecked.
nope. trolling online is not a crime, so no regulations are needed. its the same as if someone walks up to you in real life and calls you a jerk. you dont get to do anything about that. you just move on.
If someone just walks up and calls me a jerk (and, well, we ignore the particulars of the words they used and https://en.wikipedia.org/wiki/Fighting_words), I agree.
If they do it every day, every hour, or call my house 24 times a day, I can legally compel them to stop.
nobody has a natural right to anonymity, and if your actions are causing real harm then you should expect some of the real-world consequences that come from having your identity exposed.
is this a joke?
In fact, the opposite right (the right to face one's accuser) is enshrined Constitutionally in the United States when we bring the force of law to bear on a citizen.
Anonymity has value in specific contexts. It is not a universal right in all contexts.
If your position is "Well they should involve the courts first," we are probably reaching agreement, but we're all aware of how weak the legal system is regarding online harassment, right? Most cyber-crime falls way outside the jurisdictions that are traditionally designed to handle harassment (as harassment was traditionally a very geographically-localized crime).
I'm personally willing to let the bar for "Disclosing enough information about someone's handle that they can be found IRL" lower than "a warrant is out for their arrest."
(This does raise an interesting question: perhaps we do need some kind of new cross-jurisdictional legal organ to decide when harassment raises to the bar of "doxxing acceptable" whether or not it raises to the bar of "prosecutable." That'd be nice to have; then we could have a generally-accepted standard for when it is and is not okay).
no because no crime has been committed, unless you count the doxxing.
It may be a component of another crime, such as slander or incitement to violence.
If the individual in question believes this organization has done either of those things, they are welcome to involve the law (as the other party is doing).
Doxxing is an escalation intended to cause real harm in the real world.
Correct. And is the necessary escalation when online-only tools have failed and the attacker will not relent (such as this circumstance, where the actor in question is taking active steps to bypass methods to down-sample their signal).
I'm assuming most people holding a position in this conversation aren't absolutists (for example, they recognize why the FBI honeypots / tricks people / subpoenas information to de-anonymize those suspected of crime). Is the issue which hands hold the power / take the step of de-anonymizing someone? If that is the issue, what is the recommend course of action in this scenario (which exceeds people's tolerance to continue to operate freely in the OSS community without harassment but does not meet the threshold of an FBI criminal investigation)?
other tools are available (captcha, TLS fingerprinting, browser fingerprinting). if the moderator is not using these, its not a free permission for them to doxx someone.