www-infrastructure-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Daniel Shahaf <...@daniel.shahaf.name>
Subject Re: svn commit: r820443 - /infrastructure/trunk/projects/comments/privacy.html
Date Wed, 06 Jun 2012 10:54:01 GMT
humbedooh@apache.org wrote on Wed, Jun 06, 2012 at 09:12:59 -0000:
> Author: humbedooh
> Date: Wed Jun  6 09:12:58 2012
> New Revision: 820443
> 
> Log:
> Update privacy policy
> 
> Modified:
>     infrastructure/trunk/projects/comments/privacy.html
> 
> Modified: infrastructure/trunk/projects/comments/privacy.html
> ==============================================================================
> --- infrastructure/trunk/projects/comments/privacy.html (original)
> +++ infrastructure/trunk/projects/comments/privacy.html Wed Jun  6 09:12:58 2012
> @@ -1,12 +1,15 @@
> -<h1>Privacy policy for apaste.info</h1>
> +<h1>Privacy policy for comments.apache.org</h1>
>  

Do you have apaste's permission to copy their privacy policy?

Do you need ASF Legal review on this policy?  Have you obtained it?

>  <pre>
> -No data except what you personally enter is kept on record.
> +No data except what you personally submit is kept on record.
>  A cookie is used to keep track of moderators and other people 
>  who wishes to create an account to avoid having to enter their
> -credentials whenever they wish to post a commend. No 
> -ifentifiable information, such as your IP address or your 
> -browser type is kept on record.
> +credentials whenever they wish to post a comment. 
> +
> +To prevent spam and unsolicited comments, we use a SHA digest 
> +of visitors' IPs to track comments posted by them, however, 
> +for the sake of privacy, this digest cannot be resolved into 
> +your actual IP.

I don't really think so, it's just a 2**32 search space and probably far
less in many cases, in practice it'll be trivial to reverse sha1 when
the input is a dotted-decimal IPv4.

>  
>  Entering an email address when you post a comment is completely 
>  optional, and will not be shared with anyone. If you enter an
> 

Mime
View raw message