Closed Bug 1279999 Opened 9 years ago Closed 8 years ago

document a process by which users can consent to sharing crash info with limited external parties

Categories

(Socorro :: General, task)

Product:
Socorro
Component:
General
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: lonnen, Unassigned)

Details

We occasionally have a crash that requires cooperating with a third party. See: https://bugzilla.mozilla.org/show_bug.cgi?id=1229252 If we are able to find a user that is willing to share their crash with the third party, as above, there isn't a documented process for recording consent and sharing this data.
Summary: document a process by which users can consent to sharing cash info with limited external parties → document a process by which users can consent to sharing crash info with limited external parties
Building a datastore (i.e. django app) that maps crash IDs -> users would perhaps make it possible to give out minidump access to specific non-mozilla users.
We purposefully don't have a good way of associating crashes back to a user for a user to give us permission after the fact. The best we have is an optional email field. I've started a conversation with privacy@ about what an acceptable test for ownership is when sharing this information. I don't think we need a technical solution, yet. In six years this is the first time it has come up.
(Sorry if I'm just speaking the obvious but...) If we do decide to have a technical solution, let's NOT rely on the Email field in the crash in any way.
Marking WONTFIX because of the low payoff for the input required to fix it. If it comes up again we can revisit this. Closing for now.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.