www-infrastructure-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joe Schaefer <joe_schae...@yahoo.com>
Subject Re: svn commit: r820443 - /infrastructure/trunk/projects/comments/privacy.html
Date Wed, 06 Jun 2012 10:58:14 GMT
----- Original Message -----

> From: Daniel Shahaf <d.s@daniel.shahaf.name>
> To: humbedooh@apache.org
> Cc: infrastructure-dev@apache.org
> Sent: Wednesday, June 6, 2012 6:54 AM
> Subject: Re: svn commit: r820443 - /infrastructure/trunk/projects/comments/privacy.html
> 
> humbedooh@apache.org wrote on Wed, Jun 06, 2012 at 09:12:59 -0000:
>>  Author: humbedooh
>>  Date: Wed Jun  6 09:12:58 2012
>>  New Revision: 820443
>> 
>>  Log:
>>  Update privacy policy
>> 
>>  Modified:
>>      infrastructure/trunk/projects/comments/privacy.html
>> 
>>  Modified: infrastructure/trunk/projects/comments/privacy.html
>> 
> ==============================================================================
>>  --- infrastructure/trunk/projects/comments/privacy.html (original)
>>  +++ infrastructure/trunk/projects/comments/privacy.html Wed Jun  6 09:12:58 
> 2012
>>  @@ -1,12 +1,15 @@
>>  -<h1>Privacy policy for apaste.info</h1>
>>  +<h1>Privacy policy for comments.apache.org</h1>
>>   
> 
> Do you have apaste's permission to copy their privacy policy?

AFAIK he *is* apaste.info (check whois ;-).

> 
> Do you need ASF Legal review on this policy?  Have you obtained it?

Don't think this is necessary, but wouldn't hurt.

> 
>>   <pre>
>>  -No data except what you personally enter is kept on record.
>>  +No data except what you personally submit is kept on record.
>>   A cookie is used to keep track of moderators and other people 
>>   who wishes to create an account to avoid having to enter their
>>  -credentials whenever they wish to post a commend. No 
>>  -ifentifiable information, such as your IP address or your 
>>  -browser type is kept on record.
>>  +credentials whenever they wish to post a comment. 
>>  +
>>  +To prevent spam and unsolicited comments, we use a SHA digest 
>>  +of visitors' IPs to track comments posted by them, however, 
>>  +for the sake of privacy, this digest cannot be resolved into 
>>  +your actual IP.
> 
> I don't really think so, it's just a 2**32 search space and probably far
> less in many cases, in practice it'll be trivial to reverse sha1 when
> the input is a dotted-decimal IPv4.
> 
>>   
>>   Entering an email address when you post a comment is completely 
>>   optional, and will not be shared with anyone. If you enter an
>> 
> 

Mime
View raw message