3 ms·

How did they collect this data without someone raising privacy flags? Releasing this data is almost certainly a bad idea, since it will likely reveal who the p

by afhof 14y ago

How did they collect this data without someone raising privacy flags? Releasing this data is almost certainly a bad idea, since it will likely reveal who the people are who made those requests. Anonymized data usually isn't.

DanBC 14y ago
> Additionally, while the dataset has been approved by the Indiana University IRB for “non-human subjects research” (protocol 1110007144), it might potentially contain bits of stray personal data. Therefore we require that you follow these instructions to request the data. You will have to sign a data security agreement. > Data Transfer: If your request is approved, you will send a blank 3TB hard drive to the address below. > We will return the loaded drive to the address specified in your request within 10 business days of receiving it. The data on the drive will be encrypted using TrueCrypt. The password to decrypt the data will be emailed to address that you specified in your request. It will be your responsibility to install and configure TrueCrypt (http://www.truecrypt.org/ http://www.truecrypt.org/) on the system where you will be accessing the data. > 4.) Data Removal: When you have finished using the data, you are responsible for securely and permanently removing the data including the drive that was used to transfer the data. For more information about secure data removal please see: (https://protect.iu.edu/cybersecurity/data/secureremoval https://protect.iu.edu/cybersecurity/data/secureremoval) . > I have read and agree to abide by all University data security practice related to access to University confidential data. To the best of my ability, I will comply, keep secure, or return all information provided to me. TL:DR they're just crossing their fingers and hoping for the best.
- kordless 14y ago
  Serious question here. What's the point of all this?

by afhof 14y ago

DanBC 14y ago

> Additionally, while the dataset has been approved by the Indiana University IRB for “non-human subjects research” (protocol 1110007144), it might potentially contain bits of stray personal data. Therefore we require that you follow these instructions to request the data. You will have to sign a data security agreement. > Data Transfer: If your request is approved, you will send a blank 3TB hard drive to the address below. > We will return the loaded drive to the address specified in your request within 10 business days of receiving it. The data on the drive will be encrypted using TrueCrypt. The password to decrypt the data will be emailed to address that you specified in your request. It will be your responsibility to install and configure TrueCrypt (http://www.truecrypt.org/ http://www.truecrypt.org/) on the system where you will be accessing the data. > 4.) Data Removal: When you have finished using the data, you are responsible for securely and permanently removing the data including the drive that was used to transfer the data. For more information about secure data removal please see: (https://protect.iu.edu/cybersecurity/data/secureremoval https://protect.iu.edu/cybersecurity/data/secureremoval) . > I have read and agree to abide by all University data security practice related to access to University confidential data. To the best of my ability, I will comply, keep secure, or return all information provided to me. TL:DR they're just crossing their fingers and hoping for the best.

kordless 14y ago
Serious question here. What's the point of all this?