Re: [R] security using R at work

2018-08-09 Thread Bjørn-Helge Mevik
The section I'm working in runs a facility for sensitive research data (https://www.uio.no/english/services/it/research/sensitive-data/). Our users use R (along with other analysis software). We don't consider R safe or unsafe, but have designed the services so that it should not be possible (or

Re: [R] security using R at work

2018-08-09 Thread S Ellison
> If I install R on my work network computer, will the data ever leave our > network? As far as I know, if you run R locally (and not, say, on an amazon EC2 instance) your data - indeed anything about you or your machine - will only leave your desktop if you download and run an R package that

Re: [R] security using R at work

2018-08-09 Thread john matthew via R-help
Hi Katherina. Good point you make. What makes your IT department happy with the use of R studio server? What are the safe packages? Can I trust your answer? :) John. On 9 Aug 2018 10:38, "Fritsch, Katharina (NNL) via R-help" < r-help@r-project.org> wrote: > Hiya, > I work in a very security

Re: [R] security using R at work

2018-08-09 Thread Fritsch, Katharina (NNL) via R-help
Hiya, I work in a very security conscious organisation and we happily use R. The average user can only use R via RStudio Server, with a limited number of packages available, so that adds an additional level of control. That said, are you sure that the sentence 'a few people on a mailing list

Re: [R] security using R at work

2018-08-09 Thread john matthew via R-help
Hello Laurence. Taking a pragmatic approach. If the data is so valuable and secret but also needs some analysis in R, here is suggested steps to minimise security risks. 1. Plan the analysis up front, what exactly what you want and the outcomes. 2. Take a laptop with Internet, install R and all

Re: [R] security using R at work

2018-08-09 Thread Barry Rowlingson
On Thu, Aug 9, 2018 at 9:14 AM, Jan van der Laan wrote: > You can also inadvertently transmit data to the internet using a package > without being obviously 'stupid', e.g. by using a package that uses an > external service for data processing. For example, some javascript > visualisation libs can

Re: [R] security using R at work

2018-08-09 Thread Jan van der Laan
You can also inadvertently transmit data to the internet using a package without being obviously 'stupid', e.g. by using a package that uses an external service for data processing. For example, some javascript visualisation libs can do that (not sure if those wrapped in R-packages do), or,

Re: [R] security using R at work

2018-08-09 Thread Rainer M Krug
I can not agree more, Barry. Very nicely put. Rainer > On 8 Aug 2018, at 18:10, Barry Rowlingson > wrote: > > On Wed, Aug 8, 2018 at 4:09 PM, Laurence Clark > wrote: >> Hello all, >> >> I want to download R and use it for work purposes. I hope to use it to >> analyse very sensitive data

Re: [R] security using R at work

2018-08-09 Thread Rainer M Krug
This can likely be answered for R itself, but R itself (without additional packages) is very limited. As soon as you install packages, it all depends on the package you install and if you trust the authors of these packages. As far as I know, there is no code checking for security on CRAN

Re: [R] security using R at work

2018-08-08 Thread rsherry8
I consider R to be secure. It is possible, but very unlikely, that there are some back door traps in R where somebody could access your data. There is no software that is 100% secure and R is not 100% secure. Bob On 8/8/2018 11:09 AM, Laurence Clark wrote: Hello all, I want to download R

Re: [R] security using R at work

2018-08-08 Thread Rich Shepard
On Wed, 8 Aug 2018, Laurence Clark wrote: I want to download R and use it for work purposes. I hope to use it to analyse very sensitive data from our clients. Laurence, Good choice. My question is: If I install R on my work network computer, will the data ever leave our network? I need

Re: [R] security using R at work

2018-08-08 Thread Barry Rowlingson
On Wed, Aug 8, 2018 at 4:09 PM, Laurence Clark wrote: > Hello all, > > I want to download R and use it for work purposes. I hope to use it to > analyse very sensitive data from our clients. > > My question is: > > If I install R on my work network computer, will the data ever leave our >