4 ms·
> A submission emailed to them. A PDF of the submission dropped into a Google Drive folder. A line added to a Google Sheet spreadsheet with the submission data.
by ed25519FUUU 6y ago
> A submission emailed to them. A PDF of the submission dropped into a Google Drive folder. A line added to a Google Sheet spreadsheet with the submission data.
This all sound great for the city, but it makes me concerned about privacy. At least with the form somebody had to be in physical access to steal the information. Now they just need access to one cog’s Google drive.
- cube00 6y agoI also noticed the GitHub issues are full of city officials' names and email addresses, the perfect base to set up a social engineering attack. I really don't understand why all those GitHub issues need to be publicly accessible like this, all it takes is one team member to inadvertently post something sensitive and you're stuffed.
- prepend 6y agoCity official names and emails are usually public records and are in Boston. So it’s no more of a risk than current levels. There is a risk of posting the wrong info, but that should be acceptable given the unlikely probability of that happening and the harm of when it does. Posting a citizens form is really bad, but posting meeting minutes probably isn’t too bad. I think it’s important to consider the risk vs the benefit. How much is having better collaboration and avoiding a JIRA license worth?