[Vtigercrm-developers] WHY does vtiger contain a webbug?

[Hamono, Chris (DPC)]

Thanks

People are very sensitive these days about such information leaks. It is not true that the information you mentioned below is the only information collected.

You could also collect information about who is accessing the site via cookies and IP addresses. You may be collecting referrer information which may contain sensitive information. Even the URL itself could be sensitive.

This is a part of the META data we hear a lot of press about. Its often more meaningful than what actual pages people visit.

I am not saying you do collect any of this information. I am saying its entirely possible that you could collect this information.

Thank you for recognising that this is a concerning matter.

Chris
________________________________________
From: vtigercrm-developers-bounces at lists.vtigercrm.com [vtigercrm-developers-bounces at lists.vtigercrm.com] On Behalf Of Sreenivas Kanumuru [svk at vtiger.com]
Sent: Friday, March 06, 2015 8:59 PM
To: vtigercrm-developers at lists.vtigercrm.com
Subject: Re: [Vtigercrm-developers] WHY does vtiger contain a webbug?

Chris, Thanks for the feedback. We'll make this an installation choice during next version. We didn't do it in the first place because the data that is sent is benign, but i now understand that it is important to make user aware before installation. I apologize for causing you embarrassment.

I shared details of what is sent to stats server below.

The only information that is sent to the stats server is  1) A randomized registration number, 2) Vtiger version number, and 3) Industry that user has selected during configuration wizard. No other data from the system is sent.

Regards,
Sreenivas

On Fri, Mar 6, 2015 at 2:31 PM, Alan Bell <alan.bell at libertus.co.uk<mailto:alan.bell at libertus.co.uk>> wrote:
you make a good point. I reopened the ticket.

Alan.

On 06/03/15 07:34, Hamono, Chris (DPC) wrote:
I do not have access rights to Trac

Considering this was fixed in 5.1 it was probably simply missed in the upgrade to 6.0

I do not recall if it is. but if not this should be an option provided during install. Not something to be stumbled upon some time down the track.

Chris


_______________________________________________
http://www.vtiger.com/