dado3212 / groupme-analysis

A site for easy GroupMe analysis
https://groupmeanalysis.com
5 stars 2 forks source link

question #1

Closed weallwegot closed 7 years ago

weallwegot commented 7 years ago

where does the textual data from the groupme go/ is it stored anywhere? just curious i wanted to run this on a group im in but wanted to clarify what security was like.

Also, awesome project i was thinking of doing something really similar/identical, glad i looked around first!

dado3212 commented 7 years ago

The raw textual data from the groupme is processed, and then discarded, it doesn't get stored anywhere. However, the analysis IS stored, which includes top comments on a per-person basis. Obviously, this data shouldn't be left unencrypted. I use Sodium, with a 10 digit passcode generated with (openssl_random_pseudo_bytes(10)). This passcode isn't stored, and is only available in the message that the bot sends in the groupme, passed in as a query parameter.

If the bot is removed from the group after processing, it doesn't have access to those messages. And if you don't remove it, it can see all the messages anyways. Therefore, if used properly, all the information about the group is left private.

That being said, if you still feel uncomfortable, you should be able to easily clone the repo, and adapt it into something that will run on your group without ever touching my server. Enjoy!

weallwegot commented 7 years ago

ah okay, got it. thanks so much!