Meeting #07 - Oct 12, 2022

[arkinmodi]

Meeting Time: 8 PM Meeting Agenda:

• [x] Hazard Analysis

Related Issues:

• 96

[arkinmodi]

Hazards

General

• PII
  • Encryption at rest and in transit
• SQL Injection
  • Input validation
• No internet connection
  • Block write
  • Local Caching (read only)
• DB failures
  • Mitigation: DB backups/snapshots
  • Data loss
  • Database offline
  • Race conditions
• Account hacks
  • Assumption: user will follow the best security practices
• User unable to login
  • Mitigation: reset password

Appointments

• Race conditions of 2 appointments being created at the same time
  • Mitigation: Shop owner has to accept the appointment
    • Assumption: Shop owner is not trying to cause a race condition

Quotes

• Chat disconnects
  • Web socket failure or internet interruption or connection becomes stale
  • Mitigation: notify user of disconnection, cache last x messages from each discussion, disable send button

Employees

• Past employee tries to accept invite link after they have left the company
  • Mitigation: expire invite link, invite link can only be accepted once, shop owner can delete employee

[arkinmodi]

Hazard Analysis Sections

1. Introduction + Scope + Definitions (@joyxiao99)
2. FMEA Table (@LeonSo7 @arkinmodi)
   • Hazards
   • Effect of Hazards
   • Recommended Actions
3. Recommend Action turned into Safety Requirements (@TimChoy)
4. Roadmap (@arkinmodi)

We should also update the SRS with these new safety requirements