[wp-hackers] Plugin update & security / privacy

[Aaron Brazell]

This conversation is pretty moot at this point. For 2.3 anyway. Ya'll can probably cool your heels. Like it or not, today is 2.3 launch date and everything has been pretty much frozen for weeks as its all been about bug fixing. I'd highly doubt that even if you convinced Matt, that _anything_ would or could be done for 2.3. So... Save your arguments and energy for 2.4.

(This is my way of trying to end the argument peacefully)
(via Blackberry)
Aaron Brazell 
Director of Technology, b5media
"A Global New Media Company" 

web:: www.b5media.com, www.technosailor.com
phone:: 410-608-6620 
skype:: technosailor     

-----Original Message-----
From: "Jamie Holly" <hovercrafter at earthlink.net>

Date: Mon, 24 Sep 2007 09:42:54 
To:<wp-hackers at lists.automattic.com>
Subject: RE: [wp-hackers] Plugin update & security / privacy


What makes this issue so big is the "secrecy" involving what it is doing.
Adding a simple warning, or even an opt-in/out method would entail minimal
coding. The resistance against that leaves some with a feeling that "well
maybe they are going to do something with this list of URLs". There is no
statement of privacy or anything. How is average Joe to be assured that WP
isn't going to sell this collection of URLs to spam services? Every other
mainstream service/application that collects any information makes sure the
end user knows about this and has a privacy statement to go along with the
service.

A golden rule of any product/service is that you *never* assume on behalf of
the consumer/end-user. Transparency is the key to trust. Also the strong
resistance to this transparency, given by Matt (who is more or less the
voice of WP), is actually making a stronger argument for this transparency.
When Matt said if you don't like it then "use another product, start a
fork", it really gave a sense that he has something personally to
profit/gain from this feature.

Now for a question.

I haven't looked into the code enough yet, but how effective will this
plugin to remove it be? You can't install the plugin until after you install
the product. By that time hasn't a check already been done, or does a wait a
predetermined amount of time after an install/upgrade to check for updates? 

Jamie Holly
http://www.intoxination.net


>-----Original Message-----
>From: wp-hackers-bounces at lists.automattic.com [mailto:wp-hackers-
>bounces at lists.automattic.com] On Behalf Of Peter Westwood
>Sent: Monday, September 24, 2007 8:34 AM
>To: wp-hackers at lists.automattic.com
>Subject: Re: [wp-hackers] Plugin update & security / privacy
>
>
>On Mon, September 24, 2007 5:59 am, Matt Mullenweg wrote:
>> Mark Jaquith wrote:
>>>> 2. It's simple, easy, and self-evident.
>>>
>>> It's a behind the scenes feature, so simplicity and ease don't really
>>> apply.  Self-evident?  Evident to whom?  Evident for what purpose?
>>
>> URLs are useful unique identifiers and in my opinion the best one to
>use
>> on the web. You can normalize them, organize them by domains and
>> subdomains, look for odd characters or paths, create stats by TLDs,
>map
>> them to hosting providers, use them as a basis for a crawl, and
>> associate them with WordPress.org profiles. MD5s are unique, but don't
>> have a lot of value beyond that, and even a capitalization or trailing
>> slash change will change the whole MD5. There are also things I think
>we
>> haven't imagined yet that could make URLs useful. Maybe a .org toolbar
>> that ties into your .org profile and makes it easy to manage multiple
>> blogs and tie them together. If by the time 2.5 comes around we're
>still
>> not doing anything useful with it then we can re-examine it.
>>
>> I don't think an MD5 would be significantly more anonymous either.
>> Anyone with a list of URLs could associate the md5 with a URL just by
>> pre-computing the URL MD5s and comparing. So they would be different,
>> but not really better. You'd have to add a salt of some kind. We're
>> hours from the release arguing about a bikeshed that was checked in
>over
>> a month ago.
>>
>
>I think I agree with matt here.  The main point is this is a bikeshed
>issue.
>
>>From personal experience running the webservice for my version-check
>plugin [1] I have had no complaints of issues with the fact that it
>sends
>the blog url with every request.
>
>For me the main points are:
>
> 1. Sending the url doesn't expose any private information.
> 2. We have been sending our urls out as pings for years without any
>issue.
> 3. Sending the url may allow Wordpress.org to do analysis of the user
>base in the future - we should probably state this if and when it
>happens.
>
>In my view the best thing that could be done now is to document the API
>on
>the front page of api.wordpress.org and point there from the release
>notes.
>
>[1] http://blog.ftwr.co.uk/wordpress/wp-version-check/
>
>--
>Peter Westwood <peter.westwood at ftwr.co.uk>
>http://blog.ftwr.co.uk
>_______________________________________________
>wp-hackers mailing list
>wp-hackers at lists.automattic.com
>http://lists.automattic.com/mailman/listinfo/wp-hackers

_______________________________________________
wp-hackers mailing list
wp-hackers at lists.automattic.com
http://lists.automattic.com/mailman/listinfo/wp-hackers