Comments on: Protecting Your Users’ Data with a Privacy Wall http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/ (intr.v.) 1. To waste time; trifle. 2. To talk nonsense. (n.) Nonsense; foolishness Tue, 19 Jan 2010 14:46:06 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Safeguarding Your Data: The Privacy Wall « Wesabe: Your Money. Your Community. http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/comment-page-1/#comment-1221 Safeguarding Your Data: The Privacy Wall « Wesabe: Your Money. Your Community. Wed, 18 Nov 2009 03:27:27 +0000 http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/#comment-1221 [...] like something a bit more technical, along with ways to attack the wall, I’ve posted a longer article over on my personal [...] [...] like something a bit more technical, along with ways to attack the wall, I’ve posted a longer article over on my personal [...]

]]> By: David http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/comment-page-1/#comment-1218 David Mon, 05 Oct 2009 21:18:47 +0000 http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/#comment-1218 Brad- The only thing I could think would need a change to the OpenID spec. Along with the user's OpenID would be sent some random (but consistent) secret. Each user would get a different value. Then that secret could be used to index the user's private data in the database. Not sure there's much chance in getting that accepted though. Brad-

The only thing I could think would need a change to the OpenID spec.

Along with the user’s OpenID would be sent some random (but consistent) secret. Each user would get a different value.

Then that secret could be used to index the user’s private data in the database.

Not sure there’s much chance in getting that accepted though.

]]> By: brad http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/comment-page-1/#comment-1217 brad Mon, 05 Oct 2009 20:36:23 +0000 http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/#comment-1217 Good question, David. There really needs to be some secret that is not stored on the server-side in order for this to work, so it's not a great fit for things like OpenID or OAuth. You could ask the user to create a secondary password, although that kind of defeats the purpose of OpenID. You could set a cookie with a generated secret when the user first signs up, but that's going to stop working if the user changes browsers or clears their cookies. You could also send that secret to them via email, telling them that they'll need it should they use another browser or clear their cookies, but that's still not very user-friendly. This might make for a good follow-up post. If you have any ideas on it, let me know. Good question, David. There really needs to be some secret that is not stored on the server-side in order for this to work, so it’s not a great fit for things like OpenID or OAuth.

You could ask the user to create a secondary password, although that kind of defeats the purpose of OpenID.

You could set a cookie with a generated secret when the user first signs up, but that’s going to stop working if the user changes browsers or clears their cookies. You could also send that secret to them via email, telling them that they’ll need it should they use another browser or clear their cookies, but that’s still not very user-friendly.

This might make for a good follow-up post. If you have any ideas on it, let me know.

]]> By: David http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/comment-page-1/#comment-1216 David Mon, 05 Oct 2009 19:39:53 +0000 http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/#comment-1216 Nice article. Got any ideas for when I don't have anything that only the user knows? I'm authenticating using OpenID, so I only get the user's OpenID - no password or anything only known to the user (the OpenID is by its nature public). Nice article.

Got any ideas for when I don’t have anything that only the user knows?

I’m authenticating using OpenID, so I only get the user’s OpenID – no password or anything only known to the user (the OpenID is by its nature public).

]]> By: sınıf öğretmeni http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/comment-page-1/#comment-1203 sınıf öğretmeni Tue, 03 Feb 2009 20:24:47 +0000 http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/#comment-1203 thanks, great article. thanks, great article.

]]> By: Ajanslar http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/comment-page-1/#comment-1201 Ajanslar Fri, 30 Jan 2009 14:45:25 +0000 http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/#comment-1201 Wonderful article. I’m interested in this subject and want to learn more. Privacy wall is so important. Thank you Wonderful article. I’m interested in this subject and want to learn more. Privacy wall is so important. Thank you

]]> By: boyaci http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/comment-page-1/#comment-1200 boyaci Tue, 20 Jan 2009 18:44:03 +0000 http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/#comment-1200 Ninja Privacy Techniques” was on one-way hashes which is ancient (in computer terms), but the privacy wall techniques they’re both implementing and educating around are beautifully simple, and pressingly Ninja Privacy Techniques” was on one-way hashes which is ancient (in computer terms), but the privacy wall techniques they’re both implementing and educating around are beautifully simple, and pressingly

]]> By: nick http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/comment-page-1/#comment-1197 nick Fri, 02 Jan 2009 16:09:45 +0000 http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/#comment-1197 thanx thanx

]]> By: aşk şiirleri http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/comment-page-1/#comment-1189 aşk şiirleri Wed, 19 Nov 2008 12:33:56 +0000 http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/#comment-1189 [...] footle » Protecting Your Users’ Data with a Privacy Wall. the privacy scheme is pretty obvious but they have some good tips on other production problems that come up. [...] [...] footle » Protecting Your Users’ Data with a Privacy Wall. the privacy scheme is pretty obvious but they have some good tips on other production problems that come up. [...]

]]> By: oil painting reproductions http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/comment-page-1/#comment-1152 oil painting reproductions Thu, 17 Jul 2008 08:48:00 +0000 http://blog.footle.org/2007/02/22/protecting-your-users-data-with-a-privacy-wall/#comment-1152 We’re presently setting up a server for a small call center. The client wishes to upload all call recordings through FTP to his own server file. At this point, I’ve already detected a server hole. In this case, how can your discussion help us? How can we implement it to our server or system? We’re presently setting up a server for a small call center. The client wishes to upload all call recordings through FTP to his own server file. At this point, I’ve already detected a server hole. In this case, how can your discussion help us? How can we implement it to our server or system?

]]>