From owner-freebsd-questions@FreeBSD.ORG Mon Aug 14 17:30:37 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 79D1416A4E0 for ; Mon, 14 Aug 2006 17:30:37 +0000 (UTC) (envelope-from lists@jnielsen.net) Received: from ns1.jnielsen.net (ns1.jnielsen.net [69.55.238.237]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1BAEE43D58 for ; Mon, 14 Aug 2006 17:30:36 +0000 (GMT) (envelope-from lists@jnielsen.net) Received: from localhost (jn@ns1 [69.55.238.237]) (authenticated bits=0) by ns1.jnielsen.net (8.12.9p2/8.12.9) with ESMTP id k7EHUZkS069817; Mon, 14 Aug 2006 10:30:36 -0700 (PDT) (envelope-from lists@jnielsen.net) From: John Nielsen To: freebsd-questions@freebsd.org Date: Mon, 14 Aug 2006 13:30:34 -0400 User-Agent: KMail/1.9.3 References: <20060814100913.S7522@ganymede.hub.org> In-Reply-To: <20060814100913.S7522@ganymede.hub.org> X-Face: #X5#Y*q>F:]zT!DegL3z5Xo'^MN[$8k\[4^3rN~wm=s=Uw(sW}R?3b^*f1Wu*.<=?utf-8?q?of=5F4NrS=0A=09P*M/9CpxDo!D6?=)IY1w<9B1jB; tBQf[RU-R<,I)e"$q7N7 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200608141330.35085.lists@jnielsen.net> X-Virus-Scanned: ClamAV version 0.88.3, clamav-milter version 0.88.3 on ns1.jnielsen.net X-Virus-Status: Clean Cc: "Marc G. Fournier" Subject: Re: BSDstats v3.0 - The Security Rewrite X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Aug 2006 17:30:37 -0000 On Monday 14 August 2006 09:19, Marc G. Fournier wrote: > Over the past few days, I've been working with Paul Schmehl and Matthew > Seaman to come up with a more "security sensitive" version of BSDstats ... > one that reduces the amount of "sensitive information" stored in the > database down to ... zero. No IPs, no hostnames ... > > This new version also reduces the number of 'network fetches' down to 4 > for the first run, and 3 for subsequent runs, so it runs a bit faster, and > talks across the network less. > > And, finally, this one has its own domain for check in server ... > > None of the pre-v3.x clients can talk to the v3.x server, since the DB > format has totally changed, so everyone needs to grab the latest version > and run it so that we can re-sync the database properly ... > > >From now forward, the stats will be viewable from: > > http://www.bsdstats.org This is great! Is the 15-minute first-time waiting period enforced on the server side? Obviously there's nothing to stop an administrator from editing the script locally.. Thanks again for all your efforts. JN