Session
Super Ninja Privacy Techniques for Web App Developers
Marc Hedlund, Chief Product Officer, Wesabe
Brad Greenlee, Wesabe
Track: Web 2.0 Services and Platforms
Date: Tuesday, April 17
Time: 1:30pm
- 2:20pm
Location: 2003
There's plenty of information on the Web about how an individual can protect their own privacy on the Net, but little about how to architect a web app to help protect your users' privacy. We'll look at some techniques to make a web app that cares about its users' privacy:
- Privacy is Local: how to take advantage of client apps for giving users control of their data
- The Hardest Threat: how to architect a web app to make it non-trivial for your employees to compromise a user's privacy
- Partitioning: how to keep data in two or more locations in order to avoid single points of failure
- Data Skew: dropping precision to avoid exact matches that would identify data sources
- Log Scrubbing: setting up logging systems to avoid retaining the wrong kinds of user information, such as passwords
- Voting Algorithms: how to expose user-contributed data privately by waiting for a "quorum" before publishing














































































