search

chrsep / Kingfish

Portal for Binusmaya v0.3 and up
http://goo.gl/oqjjUE
GNU General Public License v3.0
26 stars 10 forks source link

So about SADC... #23

Open Luche opened 6 years ago

Luche commented 6 years ago

So SADC is already aware of this app and telling us to not use Portal because of the security.

However I like this app, the UI is so clean and simple unlike the official one, and I still wanna use Portal, so I'm asking here,

Is our data save? Can we trust you? (Couldn't you make a partnership with binus? 😂😂) Also please tell us about where you keep our data if possible :D

Luche commented 6 years ago

Haha I definitely agree with you there, I'm gonna be harsh, the UI on the official one is so trash.

Aside from that, So, is it possible if someone steal our data?

chrsep commented 6 years ago

Hi @Luche , Your data is save, all of it is saved only on your device. I understand the concern that Portal might steal your data, and i've heard about the announcement from SADC.

I'll be honest, I do gather data for debugging the last bug for Binusian 2021 that prevents everyone from logging in. Implementation is here. It logs the last few request before a crash, i redacted any password, cookies, and identifiable information from it, it sends the data as raw strings directly into fabric so i can't query it. I assure you that i have no ill intentions.

Since Portal was launched 2 years ago, i've been keeping the code open so that anyone can, inspect, and contribute to portal's source code. I've tried to make it easy for people to contact me in case there is any concern or if i've made a mistake.

SADC didn't even try to contact me through Github or email before making this announcement, but i understand the concern, and they are justified to try to keep their student and data safe.

I don't know whether i want to make a partnership because i don't really want to be tied to a specific project right now, Portal has always been a side project for me and i think i want to keep it that way. If Binus even wanted to, they can just fork this repo and make their own version of Portal if they wanted to keep control of this application.

Luche commented 6 years ago

Thank you so much @mstephen77 and @chrsep for the explanation, I appreciate that.

I also appreciate your effort into making this app which has always been my favorite since I entered binus, I hope there will be some successors so this app will be alive longer :)

Cheers

chrsep commented 6 years ago

Thank for saying that @Luche 😁, When SADC said someone can steal your data, they probably means it's whoever developed Portal can steal your data, and I'll be honest that i can if i changed Portal's code to send the data to me and save it on my own server. But I wont, and you can find out if i did because all the code is here. I kept all the data on local databases on each devices.

Portal wouldn't have lasted this long if i had code it to send the data to me, and I probably won't also lasted this long if i did steal any data. It's not like i hide who i am, it'll be easy to find me if i did something wrong.