Firstly I'd like to apologise for not having responded sooner. On the Debian bug tracking system, submitters are not subscribed by default, you need to CC them if you want them to read your replies.
On Mon, Aug 15, 2011 at 04:56:25PM +0200, DusteD wrote: > Pressing control after the intro/demo screen, gives me > === Information stuffs, which tells people about the feature. I've attached > screenshots. > > Where people are able to either press CTRL to accept/continue OR press ALT > to reject and turn off the feature. > Before this have been done, the feature is disabled and no data will be > sent. I am sorry, it appears I was not aware of this feature. I probably just saw a wall of text and the press Ctrl thing at the bottom and pressed Ctrl to get through. I think that just shows that the implementation of the feature in 0.9.2 has some usability issues. I have taken a look at the code and the stats screen again and I have some suggestions for changes to make it more usable and secure: Re-implement the initial screen to look like this: Alt to not send statistics Ctrl to send statistics Shift for privacy policy The third option should bring up your privacy policy so people can read about what you plan to do with the submitted information. Using the system() function is a bad idea because it passes a full command to the shell and inclusion of shell meta-characters can interfere with the command running correctly. You should use the fork and exec functions on Linux instead. For Windows I don't think there is any way around this issue. Use a https URL instead of http, to protect the info that is sent from people who are monitoring the network connection. Use certificate pinning to prevent compromise of SSL CAs allowing compromise of the info that is sent, more info here: http://www.thoughtcrime.org/blog/authenticity-is-broken-in-ssl-but-your-app-ha/ BTW, why doesn't your github repository have any tags in it? -- bye, pabs http://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part
