Privacy enhancing hacking project

Nerds have a tendency to keep too much logs. This is bad because it hurts privacy of users, poses risk that information in the logs gets in the wrong hands and might be even illegal if you from an area with strong privacy regulations like the EU.

The Squid Web Proxy Cache has some nice privacy enhancing features which where added IIRC by Lutz Donnerhacke. Notable is the client_netmask configuration directive:

A netmask for client addresses in log files and cachemgr output. Change this to protect the privacy of your cache clients. A netmask of 255.255.255.0 will log all IP’s in that range with the last digit set to ‘0′

Sounds like a very sensible configuration option to me. And should be easy to implement. I dimmly remember I have seen the same in apache config files but I can’t find it in the documentation.

We should try to implement this configuration directive in more servers.

Leave a Reply