[Vtigercrm-developers] WHY does vtiger contain a webbug?

Prasad prasad at vtiger.com
Fri Mar 6 05:41:03 GMT 2015


Chris,

Please re-open the issue if you find the flag is not being used our
dev-team will review it.

Regards,
Prasad

--
FB <http://www.facebook.com/vtiger> I Twit <http://twitter.com/vtigercrm> I
LIn <https://www.linkedin.com/company/1270573?trk=tyah> I Blog
<https://blogs.vtiger.com> I Website <https://www.vtiger.com/>

On Fri, Mar 6, 2015 at 10:55 AM, Hamono, Chris (DPC) <Chris.Hamono at sa.gov.au
> wrote:

>  Sorry that is not an acceptable response.
>
> Your claims as to what you do with the information is beside the point. It
> should not be collected in the first place.
>
> There is a don't collect stats flag in config but that is not used, some
> would consider it deceptive. I might agree given you had the time to put in
> the stats collection infrastructure and code, enabling that flag was too
> hard.
>
> The reason we run a privately hosted instances is to prevent unintentional
> information leakage.
>
> As I said this is very embarrassing because other staff pointed it out to
> me.
>
> Chris
>
> *From:* Prasad <prasad at vtiger.com>
> *Sent:* ‎Friday‎, ‎6‎ ‎March‎ ‎2015 ‎1‎:‎34‎ ‎PM
> *To:* vtigercrm-developers at lists.vtigercrm.com
>
> Chris,
>
>  Vtiger Tracker used on the login page helps us measure successful
> installation and implementation used regular basis. We respect privacy
> and DO NOT collect any sort of personal information.
>
>  You have the option to turn off stats tracking, please refer:
> http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5943
>
>  Regards,
> Prasad
>
>      --
> FB <http://www.facebook.com/vtiger> I Twit <http://twitter.com/vtigercrm>
>  I LIn <https://www.linkedin.com/company/1270573?trk=tyah> I Blog
> <https://blogs.vtiger.com> I Website <https://www.vtiger.com/>
>
> On Fri, Mar 6, 2015 at 7:05 AM, Hamono, Chris (DPC) <
> Chris.Hamono at sa.gov.au> wrote:
>
>>  Why pray tell does vtiger contain a web bug on the user  login page?
>>
>> As  a government organisation this represents a serious privacy issue.
>> The fact that there is no information regarding this web bug anywhere is a
>> serious failing on the part of the vtiger team.
>>
>> It would be a simple matter to place a button on the install screen to
>> OPT IN for the collection of installation statistics but to place it
>> surreptitiously on the login page phoning home every time a user logs in to
>> the application is a serious issue.
>>
>> This has caused me serious embarrassment. Some of our applications are in
>> house secure applications and the potential for inadvertent information
>> leakage is HUGE.
>>
>> I cannot express my disappointment enough. What were you thinking!
>>
>>
>> _______________________________________________
>> http://www.vtiger.com/
>>
>
>
> _______________________________________________
> http://www.vtiger.com/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20150306/2a31e2f9/attachment.html>


More information about the vtigercrm-developers mailing list