Yahoo collaborated with Iran, providing info of 200,000 users with blogs
government.zdnet.com
government.zdnet.com
While I get the sentiment - if you operate in a country you need to follow the laws of the land no matter how you might personally view them - the reality is that this action might have actually killed people. Even if it didn't do - do you think that in that position yourself you could have said with a clear conscience: "nothing bad will happen to these people" if I give out their details?
[1] http://www.theregister.co.uk/2007/11/07/yahoo_google_microsf...
[2] http://www.theregister.co.uk/2008/08/26/yahoo_microsoft_iran...
In Iran you would be hanged simply because you don't believe in Islam, or think women should have equal rights.
This means that there should be no more respect for laws made by Iran than for the average street bully.
I challenge you to provide a single reference for any of the above alleged "hanging" offenses. (You will be held to your statements of fact regarding "believe" and "think".)
Google claims "don't be evil" - this should extend to using information to help, not hurt, the oppressed people of the world.
Yahoo makes no such claim, but the beneficiaries of a free nation have a moral obligation not to choose short-term profits over the lives of those unlucky enough to be born into nations that have no such freedom.
The thing about "don't be evil" is that once you do something evil, saying you follow that rule is extremely cynical.
The idea that Yahoo, in a matter of a few short hours, was able to search and index all the user accounts that touched a blog system over the course of five years is a bit odd to me.
It's not impossible, and given the China issues in Y's past, it's not implausible, just not that likely to me.
For example, I have a nightly process (plain jane RBDMS) that searches over 85 million records to match up with 100K records where the matches may be exact or provide potential matches from the larger table back to the smaller. This process typically takes less than 20 minutes and the system runs on what I would define as relatively average hardware.
I am assuming that the user accounts are logged in some way that keeps them from having to do some awful full text scan of blog comments for each of the 20 million users checked.
[EDIT: Rechecked log files, runtime is 15-20 mins instead of 5]