完全匿名化用户数据
我要构建一个 Rails 应用程序(实际上使用什么框架或语言并不重要),它不仅不收集用户数据,而且主动将其从服务器中删除,从而授予用户绝对偏执的匿名级别。
我正在考虑如何做到这一点的解决方案,到目前为止,我已经推断出,除了不收集任何数据并且不使用任何外部服务之外:
- 使用 HTTPS
- 关闭 Rails 日志记录
- 禁用会话 cookie
- 关闭或覆盖服务器访问日志
涵盖了大部分内容。但是,我仍然不确定某些用户数据是否会被写入我没有想到的地方。
有什么想法吗?
I am to build a Rails application (not that it actually matter what framework or language is used) that not only does not collect user data, but actively removes it from the server granting users absolute paranoid anonymity level.
I was thinking about solutions on how to do this and so far I have deduced that, besides not collecting any data and not using any external services:
- using HTTPS
- turning off Rails logging
- disabling session cookies
- turning off or overwriting server access logs
cover most of it. However, I am still not sure if some piece of user data will get written somewhere I did not think of.
Any ideas?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
我会看一下你的路由器和防火墙。有时它们被配置为记录 IP 或其他用户数据。
A couple things I would look at is your router and firewall. Sometimes they are configured to log IPs or other user data.
这很有帮助。它讲述了构建匿名器类和相关函数的最简单方法。
http://railspikes.com/2009/4/8 /如何使用 rake 匿名化数据
This is helpful. It tells about the simplest way in which you should structure your anonymizer class and related functions.
http://railspikes.com/2009/4/8/how-to-anonymize-data-with-rake