Threat Model? The threat is EU regulation. Mitigate by 'pseudoanonymisation', as called for by Reg. (EU) 2016/679. Technically this makes no sense. Legally, it's perfect to avoid a €20 million lawsuit.https://twitter.com/marcan42/status/999643376168325121 …
-
Legally it's nonsense, because if I can extract the original IP addresses, it's not anonymisation, it's masturbation. If I can crack the hashes on a laptop in a few minutes, for zero cost other than electricity, any competent judge will rule that it was not effectively anonymisedpic.twitter.com/ARIxlvh9gk
Also, even if such a stupidly broken scheme would pass legal muster, there is *no freaking reason* to not just fix the problem instead of exposing yourself. There is absolutely no excuse for bad crypto and bad random number generators. Period.
-
-
Might as well fork it.
-
I filed an issue. I have no reason to believe the author won't fix it, yet. Just complaining about the orig version. I'm not actually interested in the plugin myself, because I don't need stats and hashed IPs are not useful to me. I just started truncating the last octet for now.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.