Props to Oliver Keyes for discovering this issue and bringing it to people's attention.  


On Wed, Jun 11, 2014 at 10:09 AM, Christian Aistleitner <christian@quelltextlich.at> wrote:
Hi,

Columns for country data in EventLogging tables sometimes not only
contain the country code, but also larger chunks of the client
cookies, which may put sensitive data into the tables.

The corresponding bug is
  https://bugzilla.wikimedia.org/show_bug.cgi?id=66478

At least
  NavigationTiming
  MultimediaViewerNetworkPerformance
schemas for end of April 2014 onwards are affected.

If you publish reports exposing the country information/aggregates,
please make sure to validate the country data against exposing
sensitive information, or remove the exposing reports until the issue
is fixed.

Sorry for the inconveniences,
Christian



--
---- quelltextlich e.U. ---- \\ ---- Christian Aistleitner ----
                           Companies' registry: 360296y in Linz
Christian Aistleitner
Kefermarkterstrasze 6a/3     Email:  christian@quelltextlich.at
4293 Gutau, Austria          Phone:          +43 7946 / 20 5 81
                             Fax:            +43 7946 / 20 5 81
                             Homepage: http://quelltextlich.at/
---------------------------------------------------------------

_______________________________________________
Analytics mailing list
Analytics@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/analytics