I think the issue here is not with security but with privacy. for many people the ip address is PII (personally identifiable information). My hope ip is static and only used by me. so any records showing my ip address are equivalent to showing my home address. If we're going to protect people's PII we should be protecting IP addresses too.
That's interesting. Possible counter-points: (1) It could be argued that if the mayor accessed her work Dropbox account from her home IP address, then that introduces her home IP address into the public record, and if she didn't want that, she shouldn't have accessed it from home. (2) I don't think revealing a person's IP address is quite as bad as revealing a person's home address, because there are "attacks" you can mount against someone once you know their home address (e.g. robbing or vandalizing their house) but the point of the article is that there's relatively little you can do to someone just by knowing their IP address. (3) As I noted, someone could also get the mayor's home IP address anyway just by finding a way to contact her and telling her to visit a certain website.
I don't think it achieves anything to group all of someone's personal information under a heading like "PII" with the implication that it should all be treated the same way. Some things deserve more privacy protection than others, depending on what harmful things someone would be able to *do* with that information.
Technically correct?? (Score:1)
That's the best kind of correct!
Re: (Score:2)
I think the issue here is not with security but with privacy. for many people the ip address is PII (personally identifiable information). My hope ip is static and only used by me. so any records showing my ip address are equivalent to showing my home address. If we're going to protect people's PII we should be protecting IP addresses too.
Re:Technically correct?? (Score:0)
I don't think it achieves anything to group all of someone's personal information under a heading like "PII" with the implication that it should all be treated the same way. Some things deserve more privacy protection than others, depending on what harmful things someone would be able to *do* with that information.
Re: (Score:0)
You post with an automatic -1. That's fucking awesome. That made my day.
Please continue to die in a fire.
Re: (Score:2)
IMO, IP Addresses of visitors to the Drop Box account of the Mayor, should be no more protected than the Mayor's appointment book.
It is a list of visitors. That is all it is. And if we think the Mayor is being lobbied improperly, we should be able to have that information.