수년간 요청이 몇 차례 있었고, 이는 moderators view emails 설정으로 처리되었습니다. 감사합니다!
보통 이러한 요청들은 개인정보 보호(예: GDPR, 특히 무급 자원봉사자의 경우), 규정 준수 등의 우려에서 비롯됩니다.
이메일 주소 외에도 현재까지도 노출되는 또 다른 개인정보가 있습니다. 바로 IP 주소입니다.
CSS를 사용하여 이를 숨길 수 있다는 점을 알고 있지만, 이는 개인정보를 제대로 보호하지 못하는 반쪽짜리 해법일 뿐이며, 관리자들도 이를 볼 수 없게 되어 관리자의 업무가 다소 어려워집니다.
또한, TL4를 사용하는 것이 권장된다는 점을 알고 있으며, 현재 우리는 그렇게 하고 있습니다. 하지만 이러한 팀 구성원들에게 커뮤니티의 건강 상태(대시보드 차트)에 대한 적절한 가시성을 제공하고, TL4로는 수행할 수 없는(포럼 전체가 아니라 카테고리 모더레이터인 경우에만) 플래그 검토 작업도 지원받고 싶습니다.
moderators view emails 설정 덕분에, 적절한 모더레이터를 사용하지 못하게 하는 유일한 요인은 여전히 IP 주소에 접근할 수 있다는 점입니다. 플래그 검토와 같은 작업을 수행할 만큼 신뢰할 수 있는 구성원이지만, IP 주소에 대한 접근은 GDPR 준수에 필요한 서명된 계약, 교육 등 상당한 오버헤드를 요구합니다.
따라서, 우리는 다음과 같은 기능 추가를 제안합니다: moderators view ip addresses 설정을 통해 모더레이터에게 IP 주소를 숨길 수 있도록 하는 것입니다. 이는 사용자 프로필(처리하기가 더 간단할 수 있음)과 Logs 섹션(조금 더 복잡한 변경이 될 수 있음)에 표시됩니다.
이것이 최우선 순위가 아니며 우리와 같은 특정 시나리오에만 해당된다는 점을 인지하고 있습니다. 그럼에도 불구하고, 이 기능이 유용할 수 있는 다른 분들이 의견을 남겨주실 수 있도록 여기에 남겨두겠습니다.
for a community, members’ IP addresses are very important privacy, even cannot do much with it, but most members do care about that a lot.
each forum may have several modulators for managing the topic/posts, but not all of them need the access to IP address, IP address access is only need for investigation in some cases.
it is no good to have all modulators access to IP address.
this is about privacy, hope team could consider this soon …
thanks…
What will happen now? I’m just curious. Because I don’t know how any of moderators of forums I’m using can violate my privacy, even if they for some reason would want to.
Yeah, Finnish music taste may be, and is, strange, but that was quite… extreme.
But seriously. I have two words: the biggest ISP in Finland and its NAT (well, perhaps few more than two). Meaning good luck trying to follow me or even find my address
That is one reason why I have troubles to see that as a security issue. But perhaps someone can this time explain it to me.
For me it doesn’t matter anything if there is setting to hide IP from moderators. But it will make theirs job a bit more difficult. Again, it doesn’t matter because changing or lying IP is totally trivial trick.
And… I kind of trust on the team, because they work with big corporates and nowadays those are quite strict with security. So if they don’t see visible IP for all staff as a security (leaking privacy is a security risk) risk, I believe them.
Well… no. Do you want to guess how many has exacly same IP than mine I know out there is still countries where that may be true, because I’ve heard rumours that somewhere is still landlines, faxes, cheques and — oh lord — even cash money, but…
I agree with you in some sense. usually, this is no big deal. However, many members feel uncomfortable with it. In some cases, it does raise privacy concerns. if someone could be located at city level, it is already no good for him/her… combining with info in their post, he/she might be identified…
Who told them that mods can see their IP? I guess that the problem arises out of the fact that someone decided to create paranoia around the IPs being exposed to the mods?
As mentioned in the OP, the reason for the request on this topic comes primarily from legal concerns/obligations.
Those that provide a service where the data is stored/used are responsible for keeping it secure and are legally liable for what happens to it. In the light of e.g. GDPR, in order to provide someone with moderator status (which currently still gives visibility into the users IP address), it can require a signed contract with each moderator, specifying what may or may not be done with it, perhaps training/documentation about GDPR, etc. All that can make sense at some scales/contexts, but there are also many scenarios where it becomes an unnecessary burden which I think could be simplified with a moderators view ip addresses setting like the already existing one for hiding email addresses from mods.
Lacking that, when giving someone moderator privileges, the service may be liable for not properly protecting the data. Note that IANAL, but this is my understanding of it.
Again. GDPR allows IP. There is absolut no reason to start fix something that is not broken.
And again. There is no legal concerns and oblications. It would be nice if such reason is told, because sure, countries are different. But GDPR is not one of those.
I can’t even understand how the internet would function if more than one person has the same address, there must be sub-I.P. address if the primary one is being shared?
Understanding NAS: Shared IP Addresses ExplainedAI
In telecommunications, a Network Address Server (NAS) is a crucial component that helps manage IP addresses within a network, particularly in environments where multiple users or devices need to share a limited number of public IP addresses. This is commonly seen in Internet Service Providers (ISPs) and mobile networks.
Here’s how it works:
Network Address Translation (NAT): NAS often employs a technique called Network Address Translation. NAT allows multiple devices on a local network to be mapped to a single public IP address. This is achieved by translating the private IP addresses of devices within the local network to a public IP address when they access the internet. The NAS keeps track of these translations to ensure that incoming data packets are routed back to the correct device.
Port Address Translation (PAT): A specific type of NAT, called Port Address Translation, is frequently used. PAT assigns a unique port number to each session initiated by a device on the local network. This allows multiple devices to share the same public IP address while maintaining distinct sessions. The NAS uses these port numbers to differentiate between different devices and their respective data streams.
Dynamic Host Configuration Protocol (DHCP): NAS may also incorporate DHCP to dynamically assign IP addresses to devices within a network. This ensures efficient use of IP addresses by allocating them only when needed and releasing them when they are no longer in use.
Carrier-Grade NAT (CGNAT): In larger networks, such as those operated by ISPs, Carrier-Grade NAT is used. CGNAT allows thousands of users to share a smaller pool of public IP addresses. This is particularly important given the limited availability of IPv4 addresses. CGNAT operates at a larger scale and is designed to handle the high volume of traffic typical in ISP networks.
By using these techniques, a NAS enables efficient IP address management, allowing multiple users to share the same public IP address without conflicts. This is essential for conserving IP address space and ensuring seamless connectivity for users.
But the main point is IP-addresses are quite rarely un-changeable and when those are it is practically impossible to use these to identify someone. IP scariness is from fax era.
Now what you do with that information is another question and I think one could argue that the IP address and geographical region might help moderators to judge if a message comes from a bot account, but I don’t find the OP’s request to hide IPs from moderators and only show them to admins unreasonable.
I’m no expert about GDPR, but would say there certainly could be some legal concerns and/or obligations in general with I.P. address not necessarily from that but could be anything if someone his signed a contract that matters with laws.
With the Maxmind systems seems that can identify general region/country of address if it isn’t being masked, which is important even just knowing what country someone is located in or a citizen of is personal information.
Some people don’t care, some people do care. It does raise privacy concern, esp. when combined with information from the posts of the members. Guess you could easily think of some examples…
Say, a professor, major, research, city. This could easily help find him/her on the web.
Understand some folks don’t mind sharing ip, ( maybe even address or name?) , while some others do have a valid concern.
This request is for a setting to be able to hide ip. Just an option, Not force to hide.
Haven’t been to Seattle for over six months, I live in a tiny town with less than 1,000 people short ways north of Seattle.
In general am guessing the main reason why this could be a helpful feature would be to protect members from potential harassment, which can be based on nationality or any number of other cultural biases.
I hear you saying I.P. address isn’t critical security information for Finland or likely many other countries, but for some it could be depending on the internet provider’s security methods.
This is an important statement thanks for writing that.
I know out there is still countries where that may be true, because I’ve heard rumours that somewhere is still landlines, faxes, cheques and — oh lord — even cash money, but…