View Issue Details

IDProjectCategoryView StatusLast Update
0001359Main CAcert Websiteweb of trustpublic2015-01-16 13:17
ReporterINOPIAE Assigned ToBenBE  
PrioritynormalSeverityminorReproducibilityhave not tried
Status fix availableResolutionopen 
Product Version2015 Q1 
Target Version2015 Q1 
Summary0001359: Get statistical data to create a WoT graph
DescriptionTo create a WoT graph with graphviz there is the need to get anonymous statistical data in .dot format.
Additional InformationThe anonymity is established by hashing the data of the referenced id by using these statements:
$int = 20;
$blnstrong = true;
$salt = bin2hex(openssl_random_pseudo_bytes($int, $blnstrong));

$res = query_init ("select CONVERT(sha1(`n`.`from` + '$salt'+ sha1(u1.uniqueID) ) USING utf8) as `f1`, CONVERT(sha1(`n`.`to` + '$salt' + sha1(u2.uniqueID)) USING utf8) as `t1`
    from `notary` as `n`
       inner join `users` as `u1` on `u1`.`id` = `n`.`from`
       inner join `users` as `u2` ON `u2`.`id` = `n`.`to`
    where `n`.`deleted` = 0
    group by `f1`, `t1`
    order by `t1`");

This method is used to create a new salt every time the script is run. By this pseudonymisation it is made hard to track the developement of accounts over time.
TagsNo tags attached.
Reviewed by
Test Instructions

Activities

INOPIAE

2015-01-14 21:12

updater   ~0005240

I pushed a fix to https://github.com/INOPIAE/CAcert/commit/abcfa6ebc77fc904ef33e184d63216f8d3cb2c27

Eva

2015-01-16 13:17

updater   ~0005243

For your notice. There is an arbitration case running for this to answer if the execution of this would be allowed. There are confusing arbitration case numbers in the wiki but the correct one probably is a20150114.1.

Issue History

Date Modified Username Field Change
2015-01-14 21:05 INOPIAE New Issue
2015-01-14 21:05 INOPIAE Assigned To => INOPIAE
2015-01-14 21:12 INOPIAE Note Added: 0005240
2015-01-14 21:12 INOPIAE Assigned To INOPIAE => BenBE
2015-01-14 21:12 INOPIAE Status new => fix available
2015-01-16 13:17 Eva Note Added: 0005243