[Vtigercrm-developers] WHY does vtiger contain a webbug?

[Sreenivas Kanumuru]

You are right, Chris. It is easy to collect ip address and referrer URL,
 but we do not collect any data other than 1) A randomized registration
number, 2) Vtiger version number, and 3) Industry that user has selected
during configuration wizard. Other than knowing that an installation
happened somewhere in the world, and its version number, and user selected
industry, we can't infer anything else from that data.


On Sat, Mar 7, 2015 at 11:23 AM, Hamono, Chris (DPC) <Chris.Hamono at sa.gov.au
> wrote:

> Thanks
>
> People are very sensitive these days about such information leaks. It is
> not true that the information you mentioned below is the only information
> collected.
>
> You could also collect information about who is accessing the site via
> cookies and IP addresses. You may be collecting referrer information which
> may contain sensitive information. Even the URL itself could be sensitive.
>
> This is a part of the META data we hear a lot of press about. Its often
> more meaningful than what actual pages people visit.
>
> I am not saying you do collect any of this information. I am saying its
> entirely possible that you could collect this information.
>
> Thank you for recognising that this is a concerning matter.
>
> Chris
> ________________________________________
> From: vtigercrm-developers-bounces at lists.vtigercrm.com [
> vtigercrm-developers-bounces at lists.vtigercrm.com] On Behalf Of Sreenivas
> Kanumuru [svk at vtiger.com]
> Sent: Friday, March 06, 2015 8:59 PM
> To: vtigercrm-developers at lists.vtigercrm.com
> Subject: Re: [Vtigercrm-developers] WHY does vtiger contain a webbug?
>
> Chris, Thanks for the feedback. We'll make this an installation choice
> during next version. We didn't do it in the first place because the data
> that is sent is benign, but i now understand that it is important to make
> user aware before installation. I apologize for causing you embarrassment.
>
> I shared details of what is sent to stats server below.
>
> The only information that is sent to the stats server is  1) A randomized
> registration number, 2) Vtiger version number, and 3) Industry that user
> has selected during configuration wizard. No other data from the system is
> sent.
>
> Regards,
> Sreenivas
>
> On Fri, Mar 6, 2015 at 2:31 PM, Alan Bell <alan.bell at libertus.co.uk
> <mailto:alan.bell at libertus.co.uk>> wrote:
> you make a good point. I reopened the ticket.
>
> Alan.
>
> On 06/03/15 07:34, Hamono, Chris (DPC) wrote:
> I do not have access rights to Trac
>
> Considering this was fixed in 5.1 it was probably simply missed in the
> upgrade to 6.0
>
> I do not recall if it is. but if not this should be an option provided
> during install. Not something to be stumbled upon some time down the track.
>
> Chris
>
>
> _______________________________________________
> http://www.vtiger.com/
>
>
> _______________________________________________
> http://www.vtiger.com/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20150307/bead25a7/attachment.html>