Our Ethical Framework
ODINT is committed to conducting research that upholds the highest ethical standards. Our work has the potential to impact governments, institutions, and individuals, and we take this responsibility seriously. This ethics policy guides all of our research activities.
Guiding Principle
Our research aims to promote accountability and protect human rights. We believe that exposing vulnerabilities in government digital infrastructure serves the public interest by improving security for all citizens.
Research Ethics
Do No Harm
We never exploit vulnerabilities we discover. Our research is strictly observational. We document what we find but do not attempt to access, modify, or disrupt systems. We assess the potential for harm before publishing any research.
Responsible Disclosure
When we discover critical vulnerabilities that could endanger public safety, we follow responsible disclosure practices. We notify affected parties and provide reasonable time for remediation before public disclosure. See our Disclosure Policy for details.
Protect the Vulnerable
We take special care when our research could affect vulnerable populations. We redact or withhold information that could enable targeting of dissidents, journalists, activists, or minority groups. Human safety takes precedence over transparency.
Independence & Objectivity
We maintain editorial independence from all funders, partners, and external interests. Our findings are based solely on evidence. We do not accept funding that comes with editorial conditions or could create conflicts of interest.
What We Will Not Do
- Attempt to access systems beyond what is publicly exposed
- Use credentials, exploits, or social engineering
- Publish information that could endanger individuals
- Accept funding that compromises our independence
- Conduct research targeting specific individuals
- Share raw data that could enable malicious activities
- Collaborate with intelligence agencies or law enforcement for targeting purposes
Publication Ethics
Before publishing research, we consider:
- Public Interest: Does this information serve the public good?
- Potential Harm: Could this information be misused?
- Accuracy: Have findings been verified through multiple methods?
- Fairness: Have affected parties had opportunity to respond?
- Proportionality: Is the level of detail appropriate to the public interest?
Source Protection
We protect the identity of sources who provide information to us. We use secure communication channels, minimize data retention, and will not reveal source identities even under legal pressure. See our Journalist & Source Protection policy.
Accountability
We hold ourselves accountable to these standards. If we fall short, we will acknowledge errors, correct the record, and improve our processes. Questions or concerns about our ethics practices can be directed to contact@odint.org.