jenkins-bot has submitted this change and it was merged. Change subject: Add an admonition to eventlogging.crypto ......................................................................
Add an admonition to eventlogging.crypto explaining that the implementation is not resilient to attacks and confers no strong anonymity by itself. Change-Id: Ic96ec2c398a820f32871f04fc02ecd50e9b1f539 --- M server/eventlogging/crypto.py 1 file changed, 10 insertions(+), 0 deletions(-) Approvals: QChris: Looks good to me, approved jenkins-bot: Verified diff --git a/server/eventlogging/crypto.py b/server/eventlogging/crypto.py index 8cc4164..2d30d98 100644 --- a/server/eventlogging/crypto.py +++ b/server/eventlogging/crypto.py @@ -6,6 +6,16 @@ This module implements ephemeral key-hashing, used by EventLogging to anonymize IP addresses. + .. admonition :: The intent of the code in this module is to frustrate + casual and unthinking misuse of data by researchers. + The scrambling process is not resilient and it can be + inverted. What more, scrambled IP addresses can be + used to cross-reference events by origin, which can + facilitate identification by means of accumulation of + partially-identifying data. Upholding privacy and + anonymity in your data infrastructure will require + additional measures. + """ from __future__ import unicode_literals -- To view, visit https://gerrit.wikimedia.org/r/176500 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: Ic96ec2c398a820f32871f04fc02ecd50e9b1f539 Gerrit-PatchSet: 1 Gerrit-Project: mediawiki/extensions/EventLogging Gerrit-Branch: master Gerrit-Owner: Ori.livneh <[email protected]> Gerrit-Reviewer: Ori.livneh <[email protected]> Gerrit-Reviewer: QChris <[email protected]> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
