Why "no worse off" is worse off

We argue that a common ethical justification for computer security research reflects a naively utilitarian bias, and that this justification would be rejected under other ethical theories. By examining this issue, we hope to raise the ethical bar for security research and suggest some ways that this problem might be addressed using ideas from computer and information ethics.