VoIP Mailing List Archives
Mailing list archives for the VoIP community |
|
| View previous topic :: View next topic |
| Author |
Message |
Dean at cognation.net
Guest
|
 Posted: Fri May 16, 2008 7:46 am Post subject: [asterisk-biz] Anonymous statistics collection tool forAster |
 |
|
It would be voluntary to download the module in the first place so not
necessary to be able to 'turn off'.
Cheers,
Dean
| Quote: | -----Original Message-----
From: asterisk-biz-bounces@lists.digium.com [mailto:asterisk-biz-
bounces@lists.digium.com] On Behalf Of Nitzan Kon
Sent: Friday, 16 May 2008 8:13 AM
To: Commercial and Business-Oriented Asterisk Discussion
Subject: Re: [asterisk-biz] Anonymous statistics collection tool
|
forAsterisk servers?
| Quote: |
If you want an honest opinion... 
Anonymous statistics take bandwidth and resources, not to mention
may be a security risk (you never know how people may use sniffed
data!). If you add a statistics module to *, please make sure there
is an easy way to TURN IT OFF... 
What would be the benefit of having it on, anyway?
Thanks!
-- Nitzan
--- On Fri, 5/16/08, Dean Collins <Dean@cognation.net> wrote:
| Quote: | From: Dean Collins <Dean@cognation.net>
Subject: Re: [asterisk-biz] Anonymous statistics collection tool for
|
|
Asterisk
Business-Oriented
| Quote: | Asterisk Discussion" <asterisk-biz@lists.digium.com>
| Quote: | Date: Friday, May 16, 2008, 8:01 AM
Ok guys I'm only going to leave this survey up for a few
more days;
Click this link and answer what you think - it's only 4
questions and
will take you less than 30 seconds to answer.
http://www.questionpro.com/akira/TakeSurvey?id=954613
Lets support the Asterisk community and get an honest
opinion on what
people think about anonymous statistics.
Cheers,
Dean
________________________________
From: Dean Collins
Sent: Saturday, 3 May 2008 12:19 PM
To: Asterisk Users List (asterisk-users@lists.digium.com)
Subject: Anonymous statistics collection tool for Asterisk
servers?
I think it would be great for someone to write a small
'anonymous collection module' that an Asterisk
sys-admin could download
and install on their asterisk server which uploaded the
stats to a
community website where the data was anonymous but still
valuable for
the community.
Even if it just collected number of new installations
globally
this would be a huge help to people selling asterisk to
their customers
who continually ask "I've heard about this
Asterisk open source stuff
but how many are there installed globally anyway?"
So this survey is to gauge the community's reaction to
the
development of an analytics tool like this. Please answer
with your
honest thoughts so we can gauge demand within the community
for this
tool.
If people respond to this survey and show interest in
sharing
their information with the community then something
we'll put together a
working group to establish design parameters etc but for
the moment just
go here and vote if you think this is a good idea or not
http://www.questionpro.com/akira/TakeSurvey?id=954613
Remember this Asterisk community analytics tool will only
collect anonymous information.
Potential analytics may include - eg. How many ip handsets
does
your Asterisk server have connected, but it will never
collect their IP
addresses or personal information/passwords etc. You will
be able to see
what information is being collected in a text file before
it uploads and
will be able to control all stats it collects.
Cheers,
Dean_______________________________________________
--Bandwidth and Colocation Provided by
http://www.api-digital.com--
asterisk-biz mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-biz
|
_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--
asterisk-biz mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-biz
|
_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--
asterisk-biz mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-biz |
|
| Back to top |
|
 |
beckman at angryox.com
Guest
|
| Posted: Fri May 16, 2008 1:55 pm Post subject: [asterisk-biz] Anonymous statistics collection tool forAster |
|
|
On Fri, 16 May 2008, Dean Collins wrote:
| Quote: | It would be voluntary to download the module in the first place so not
necessary to be able to 'turn off'.
|
Even "scrubbed" anonymous data has been able to be used in ways that
really don't make it anonymous. When Netflix offered $1m to anyone who
could improve their movie recommendations, they released a large amount of
what they believed was scrubbed, anonymous data. Turns out, it wasn't so
anonymous.
http://www.wired.com/politics/security/commentary/securitymatters/2007/12/securitymatters_1213
I decidedly would not participate.
Beckman
---------------------------------------------------------------------------
Peter Beckman Internet Guy
beckman@angryox.com http://www.angryox.com/
---------------------------------------------------------------------------
_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--
asterisk-biz mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-biz |
|
| Back to top |
|
|
beckman at angryox.com
Guest
|
| Posted: Fri May 16, 2008 6:01 pm Post subject: [asterisk-biz] Anonymous statistics collection tool forAster |
|
|
On Fri, 16 May 2008, Trixter aka Bret McDanel wrote:
| Quote: | how one would properly scrub depends largely on the data in question,
who its released to, etc. The more its scrubbed though the less
valuable it becomes to many.
|
It calls into question WHO is going to be collecting and responsible for
this data? All of my data will include my IP, and whether or not it was
logged, it still could be used should someone nefarious decide they wanted
to gain access to that data. Assuming some sort of web server was
accepting posts, someone who legitimately or nefariously gained access to
that server could potentially find out proprietary information, such as
number of minutes, number of channels, etc, on their competitors servers.
While one can't imagine why this would be useful, just re-read Steven
Totaro's examples of why ANI/CLID spoofing could be damaging. Imagine you
are trying to sell your business and you can see how big or small you are
compared to your competitors, just by logging into a server that didn't
update it's OS or server software, left easily exploitable.
I don't get much benefit from giving the data, but I do put a lot at risk
for giving it. I won't participate.
| Quote: | You could of course do well to mask all the numbers in this particular
example, maybe just list the region its in (US state for example) and
not even the city. In that way you could try to reduce more and more
the information but still have some value.
|
Still, I don't know who has the data, who aggregates it, how well they
secure it, how well they scrub it, and who has access to the raw data.
| Quote: | At the very least it should be well revealed that this is going on,
especially since some places dont allow this without implicit not tacit
agreements over this.
|
Agreements and contracts mean nothing to someone who breaks into the
server for nefarious reasons.
Beckman
---------------------------------------------------------------------------
Peter Beckman Internet Guy
beckman@angryox.com http://www.angryox.com/
---------------------------------------------------------------------------
_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--
asterisk-biz mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-biz |
|
| Back to top |
|
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|
Search
