Hi All, Removing 8 bits from the IP should be enough to avoid major privacy risks and to keep the information we need in DeviceMap. Same for the timestamp rounding: one day rounding should be ok. I think this should be done by DeviceMap scripts, otherwise the upload procedure would becomes too complex for the contributor.
Trying to summarize the proposed procedure: - DeviceMap will provide a file upload page showing a disclaimer informing the user about how the data will be handled - The user must flag the "Agree" checkbox in order to submit the data The disclaimer contains the following informations: - The data will be used to improve the device description repository of the DeviceMap project - The uploaded data will not be published as is - After the upload procedure is completed, a scheduled task will process the uploaded files replacing with "00000001" the last 8 bits in the IP addresses and rounding the timestamps to the nearest day. Is this ok for those of you who have relevant sets of http logs to contribute? BR, Stefano. On 10/ott/2012, at 18.23, Bertrand Delacretaz wrote: > On Wed, Oct 10, 2012 at 6:13 PM, Werner Keil <[email protected]> wrote: >> Depending on how it's technically implemented, would a "I agree to ... and >> confirm I own the submitted data" or similar legal disclaimer work before >> uploading? > > Agreed - setting up a form for uploading, with a disclaimer that > people see in the same place, is probably the best way. > > We could simply do that on our VM at http://devicemap-vm.apache.org/ - > I'd have to checked if those boxes are backed up, but we can control > ourselves who has access to it, and restrict that to DeviceMap PPMC > members. > > -Bertrand
