Session
Super Ninja Privacy Techniques for Web App Developers
Marc Hedlund, Chief Product Officer, Wesabe
Brad Greenlee, Wesabe
Date: Wednesday, March 28
Time: 3:05pm
- 3:50pm
Location: Douglas C
There's plenty of information on the Web about how an individual can protect their own privacy on the Net, but little about how to architect a web app to help protect your users' privacy. We'll look at some techniques to make a web app that cares about its users' privacy:
- Privacy is Local: how to take advantage of client apps for giving users control of their data
- The Hardest Threat: how to architect a web app to make it non-trivial for your employees to compromise a user's privacy
- Partitioning: how to keep data in two or more locations in order to avoid single points of failure
- Data Skew: dropping precision to avoid exact matches that would identify data sources
- Log Scrubbing: setting up logging systems to avoid retaining the wrong kinds of user information, such as passwords
- Voting Algorithms: how to expose user-contributed data privately by waiting for a "quorum" before publishing