Upgrade Storagesynch with server and privacy / security
This is an old discussion that has not been active in a long time. Before commenting here, you should strongly consider starting a new discussion instead. If you think the content of this discussion is still relevant, you can link to it from your new discussion.
Can you guys (Zotero administrators) read a note written by a user (inside his private database)?
And more globally can you see (for a reason or another, such as debugging) all entries of the database?
My question does not concern the moral aspect ("it's immoral so we don't do it") but the technical aspect : can you technically access the users’ private data? And if so (if you can for instance read a private note), is there a kind of administrative procedures created to protect the users from (a hypothetical) abuse of a dishonest administrator? If so, which one?
Thanks in advance for your reply
Dan would have to speak about their internal policies, though I'm not sure how much you can do beyond monitoring such access. That's facilitated by the fact that there just aren't very many people with such access. My guess would be that there are 2.
At Zotero, access to private data is restricted to the (very few) people who need access to maintain the service, and we have tools to deal with most issues — e.g., answering support questions involving library size or sync activity — without examining library contents. The majority of the Zotero staff does not have any access to user data.
Since it's a critical security point, it would be interesting to know the detail of these access permission. How many have access? Who are those people? And the most important question: are those critical access monitored? (A 2 level system, with admin able to access user datas, but not being able to modify the access log that will be sent to lower level admin would help)
Trust is important, but relying the whole privacy on that might sound quite risky for (some) users, but also for zotero (a privacy issue would probably greatly damage zotero reputation).
The detailed protocol would add more detailed risk probability to the answer given above: "they are probably as safe with Zotero as they are with you[r laptop]". It's an interesting answer but it does not take into account these admin access (users with this concern don't allow foreign access to their laptop. Yes intrusions are still possible, but they would be treated as threat.)
ps. I know that I could use other server to sync the db. It's just difficult to assess the risk probability without these informations.
ps: Concerning Dropbox I found that:
"we have a small number of employees who must be able to access user data for the reasons stated in our privacy policy (e.g., when legally required to do so). But that's the rare exception, not the rule. We have strict policy and technical access controls that prohibit employee access except in these rare circumstances." https://www.dropbox.com/en/help/27
"Just because you're paranoid doesn't mean they aren't after you"
Dropbox's statement sounds fairly close to what I said above. But Dropbox is a multi-billion-dollar company with over a thousand employees. Zotero isn't. Our needs are much simpler — as adamsmith said, there simply aren't that many people who need access.
Fundamentally, with an organization the size of Zotero's, it does come down to trust: you need to trust the Zotero team — the people who have been running the project for the last decade, helping people in the forums every day, making sure zotero.org gets an A+ on the SSL Labs test — to make responsible decisions about all aspects of security, including internal access and monitoring. Or not, in which case you can of course use Zotero without syncing any data to zotero.org.
I'm very grateful (and it's really nothing to say) for all the work and the talent you offer us ― for free, which I find unbelievable, since you beat in quality and constant improvement easily most service I pay for. So, I trust you and I warmly thank you for having answered my question.
Many thanks, k
Beyond that, if you're actually handling sensitive data in particular about 3rd parties (informants?) you should consult a specialist. That's way beyond the scope of this forum.