Hacker News new | ask | show | jobs
by tjpnz 1514 days ago
I like this but after a cursory glance at the source I have a few concerns:

- There's a transformer which appears to retain the first char on string fields. That's not safe if you're dealing with customer data.

- Remove telemetry. That it's claimed to be anonymized and togglable is meaningless where sensitive data is concerned.

1 comments

Thanks:

  1. What do you mean it is not safe?

  2. Telemetry can be removed with the option --no-telemetry and you can inspect the code > https://github.com/Qovery/replibyte/blob/main/replibyte/src/telemetry.rs
It's not safe because I could potentially use that information to find a real customer in the DB. It becomes more problematic when working with data from Asian countries where it's possible (even common) for family and/or first names to consist of two or even a single character.

With regards to telemetry I'm aware that it can be disabled. But in my experience that would still result in a veto from the security teams I've worked with.