BOINC Drupal Release

Privacy by default

Details

  • Type: Sub-task Sub-task
  • Status: Resolved Resolved
  • Priority: Critical Critical
  • Resolution: Fixed
  • Version/s: Einstein release
  • Labels:

Description

We need to review all defaults of privacy-related defaults

  • Community -> Gravatar (off, should be the case already)
  • Privacy -> E-Mail from E@H project (do we have to? like to keep it on)
  • Privacy -> Show computers

Anything else?

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Shawn Kwang added a comment - - edited

New account settings (created 2018-03-27), default settings listed. Update: These are the current settings that are implemented for an account created on 2018-03-27.

Preference ->

  • Community ->
    • Gravitar default : this is indeed off.
    • default : "Receive email notification for private messages?" == YES
    • default : "Receive email notification for friend requests?" == YES
  • Privacy ->
    • default : "Is it OK for Albert@Home and your team (if any) to email you?" == YES
    • default : "Should Albert@Home show your computers on its web site?" == YES
Show
Shawn Kwang added a comment - - edited New account settings (created 2018-03-27), default settings listed. Update: These are the current settings that are implemented for an account created on 2018-03-27. Preference -> Community -> Gravitar default : this is indeed off. default : "Receive email notification for private messages?" == YES default : "Receive email notification for friend requests?" == YES Privacy -> default : "Is it OK for Albert@Home and your team (if any) to email you?" == YES default : "Should Albert@Home show your computers on its web site?" == YES
Hide
Permalink
Oliver Behnke added a comment -

Is this the census of the current default values or the new ones? The show computers default should be NO.

My general standpoint on this is the following: privacy in this sense means revealing/sharing personal details. That is, options to receive email (the first three above) don't share any information [1] and thus could remain opt-out. The show computers option does reveal personal details, so it should be opt-in.

Does that make sense? Do interpret it correctly? Opinions? Bernd Machenschalk?

[1] I know that unsolicited mails like newsletters are often (have to be?) opt-in nowadays, but getting contacted by us or the team (option #3) isn't of that quality, I think, as those mails are in the interest of the user and can't be considered spam.

Show
Oliver Behnke added a comment - Is this the census of the current default values or the new ones? The show computers default should be NO. My general standpoint on this is the following: privacy in this sense means revealing/sharing personal details. That is, options to receive email (the first three above) don't share any information [1] and thus could remain opt-out. The show computers option does reveal personal details, so it should be opt-in. Does that make sense? Do interpret it correctly? Opinions? Bernd Machenschalk ? [1] I know that unsolicited mails like newsletters are often (have to be?) opt-in nowadays, but getting contacted by us or the team (option #3) isn't of that quality, I think, as those mails are in the interest of the user and can't be considered spam.
Hide
Permalink
Bernd Machenschalk added a comment - - edited

I would agree with Oliver's understanding here.

Show
Bernd Machenschalk added a comment - - edited I would agree with Oliver's understanding here.
Hide
Permalink
Shawn Kwang added a comment -

And I would also agree that the question "Should (project) show your computers on its web site?" default to "NO" and that users may opt-in.

That being said, maybe we should write some text below and say something: "At times, you may be asked to enable 'show your computers' in order to receive help from the forums. Advanced users often need to be able to see your computers' information in order to help diagnose problems."

Show
Shawn Kwang added a comment - And I would also agree that the question "Should (project) show your computers on its web site?" default to "NO" and that users may opt-in. That being said, maybe we should write some text below and say something: "At times, you may be asked to enable 'show your computers' in order to receive help from the forums. Advanced users often need to be able to see your computers' information in order to help diagnose problems."
Hide
Permalink
Oliver Behnke added a comment -

Shouldn't hurt.

Show
Oliver Behnke added a comment - Shouldn't hurt.
Hide
Permalink
Shawn Kwang added a comment -

Re: show your computer option

This is actually set to TRUE by upstream BOINC when the user creates an account (GitHub). The real fix is to have this changed upstream.

However, for us we can put in a a SQL query changing the field from TRUE to FALSE when the user account is created. It's a partial work-around.

Show
Shawn Kwang added a comment - Re: show your computer option This is actually set to TRUE by upstream BOINC when the user creates an account (GitHub) . The real fix is to have this changed upstream. However, for us we can put in a a SQL query changing the field from TRUE to FALSE when the user account is created. It's a partial work-around.
Hide
Permalink
Oliver Behnke added a comment - - edited

I opened an issue upstream but please go ahead with the workaround anyway. Thanks!

Show
Oliver Behnke added a comment - - edited I opened an issue upstream but please go ahead with the workaround anyway. Thanks!
Hide
Permalink
Shawn Kwang added a comment -

GitHub PR 2450 created, which creates the work-around: when user account is created, show_hosts is set to 0 (FALSE).

Show
Shawn Kwang added a comment - GitHub PR 2450 created, which creates the work-around: when user account is created, show_hosts is set to 0 (FALSE).
Hide
Permalink
Shawn Kwang added a comment -

Deployment: should be straightforward merge of code.

Show
Shawn Kwang added a comment - Deployment: should be straightforward merge of code.
Hide
Permalink
Oliver Behnke added a comment -

Deployed on both systems.

Show
Oliver Behnke added a comment - Deployed on both systems.
Hide
Permalink
Shawn Kwang added a comment -

New accounts look to be created with show_hosts=0. Resolving issue.

Show
Shawn Kwang added a comment - New accounts look to be created with show_hosts=0 . Resolving issue.

People

  • Assignee:
    Shawn Kwang
    Reporter:
    Oliver Behnke
    Comment Request:
    Bernd Machenschalk
Vote (0)
Watch (2)

Dates

  • Created:
    Updated:
    Resolved: