- Posts: 36
- Thank you received: 4
Welcome to the LimeSurvey Community Forum
Ask the community, share ideas, and connect with other LimeSurvey users!
Anonymized responses
- advanz_lu
- Topic Author
- Offline
- Junior Member
Less
More
5 years 1 month ago #180229
by advanz_lu
Anonymized responses was created by advanz_lu
Hello,
I have set up a survey with anonymized responses with token-based response persistence and Save referrer URL ("Responses will have their referring URL logged. Cannot be changed")
I have sent it to a small number of people to test their reactions and asked them to comment on the survey.
When I look through the responses
(https://{surveydomain}/index.php?r=admin/responses/sa/browse/surveyid/{surveyID})
the token is listed under refurl.
So, I can rebuild a list of who-answered-which-question-how very easily.
Perhaps the referrer url should not be saved(savable) for anonymised responses.
Any suggestions?
-Graham-
LimeSurvey version 3.15.3+181108
(I noticed that 3.15.8 (190130) is available after I started the survey and didn't want to update until the survey was complete).
I have set up a survey with anonymized responses with token-based response persistence and Save referrer URL ("Responses will have their referring URL logged. Cannot be changed")
I have sent it to a small number of people to test their reactions and asked them to comment on the survey.
When I look through the responses
(https://{surveydomain}/index.php?r=admin/responses/sa/browse/surveyid/{surveyID})
the token is listed under refurl.
So, I can rebuild a list of who-answered-which-question-how very easily.
Perhaps the referrer url should not be saved(savable) for anonymised responses.
Any suggestions?
-Graham-
LimeSurvey version 3.15.3+181108
(I noticed that 3.15.8 (190130) is available after I started the survey and didn't want to update until the survey was complete).
The following user(s) said Thank You: DenisChenu
The topic has been locked.
- DenisChenu
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 13935
- Thank you received: 2551
5 years 1 month ago #180232
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic Anonymized responses
+1 !!!!!advanz_lu wrote: Perhaps the referrer url should not be saved(savable) for anonymised responses.
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- jelo
- Offline
- Platinum Member
Less
More
- Posts: 5070
- Thank you received: 1263
5 years 1 month ago #180239
by jelo
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
Replied by jelo on topic Anonymized responses
Looks like Denis sees this as a feature request.
I'm against automatic restriction of saving referrer when activating anonymous mode.
In different environments other data (IP-adress, browser agent etc. ) could be used to identify people too.
But LimeSurvey should allow you to enable or disable the capturing of these data even during a survey. That is the case in many survey tools. You can even pause a survey without going through a deactivation/activation.
If you cannot deactivate the survey, you cannot change it. So just ignore the referrer, if you are the only one with access to the raw data.
I'm against automatic restriction of saving referrer when activating anonymous mode.
In different environments other data (IP-adress, browser agent etc. ) could be used to identify people too.
But LimeSurvey should allow you to enable or disable the capturing of these data even during a survey. That is the case in many survey tools. You can even pause a survey without going through a deactivation/activation.
If you cannot deactivate the survey, you cannot change it. So just ignore the referrer, if you are the only one with access to the raw data.
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The topic has been locked.
- DenisChenu
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 13935
- Thank you received: 2551
5 years 1 month ago #180242
by DenisChenu
If i remind IP adress are not resgitered with anonymous survey (it was the case before).
If you want referrer url : don't say it's anonymous .
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic Anonymized responses
I really think if you say to user's it's anonymous : you MUST make it as anonymous as possible.jelo wrote: I'm against automatic restriction of saving referrer when activating anonymous mode.
In different environments other data (IP-adress, browser agent etc. ) could be used to identify people too.
If i remind IP adress are not resgitered with anonymous survey (it was the case before).
If you want referrer url : don't say it's anonymous .
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- jelo
- Offline
- Platinum Member
Less
More
- Posts: 5070
- Thank you received: 1263
5 years 1 month ago #180256
by jelo
It the same with the automatic privacy notice. The "smart" tool approach is causing more work in the end. www.limesurvey.org/forum/can-i-do-this-w...cy-every-time#168441
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
Replied by jelo on topic Anonymized responses
I don't need the referrer, but I'm aware of the history of LimeSurvey. The "smart" ideas to protect the user are often having sideeffects. Like filtering EndURL (which then broke URL more often) and the XSS setting, which is deactivated on every installation to get workarounds running.DenisChenu wrote: If you want referrer url : don't say it's anonymous .
It the same with the automatic privacy notice. The "smart" tool approach is causing more work in the end. www.limesurvey.org/forum/can-i-do-this-w...cy-every-time#168441
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The topic has been locked.
- advanz_lu
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 36
- Thank you received: 4
5 years 1 month ago #180258
by advanz_lu
Replied by advanz_lu on topic Anonymized responses
From my perspective as a user/survey creator I (just) want to know what the rules are.
If I want an anonymised survey either:
A. LimeSurvey sets the parameters so that it IS
or
B. Tells me what I have to set (and not set) so that it is.
At the moment, I have to know it (like having special "insider" knowledge).
If there are more than one survey admin and they are not really interested in the inner workings of LimeSurvey the chances are that I will be telling recipients it's anonymised and it isn't. And one of those admins could take advantage of the data.
Also,
- if LS is being used by universities this could cost someone their degree/doctorate - if it was made known that the survey that they said was anonymised was in fact not anonymised.
This could be bad news for the LS project. (do I have to mention Oxford Analytica ????)
The attached shows the options when activating a survey.
I suggest either :
A. SET "Save IP address" and "Save referrer URL" to NO when "Anonymised responses" is set to Yes
or
B. pop-up a message to say "WARNING: Your survey will only really be anonymised if you set "Save IP address" and "Save referrer URL" to NO" when "Anonymised responses" is set to Yes
- And of course option B advertises how to cheat the respondents!
My suggestion is option A.
-Graham-
If I want an anonymised survey either:
A. LimeSurvey sets the parameters so that it IS
or
B. Tells me what I have to set (and not set) so that it is.
At the moment, I have to know it (like having special "insider" knowledge).
If there are more than one survey admin and they are not really interested in the inner workings of LimeSurvey the chances are that I will be telling recipients it's anonymised and it isn't. And one of those admins could take advantage of the data.
Also,
- if LS is being used by universities this could cost someone their degree/doctorate - if it was made known that the survey that they said was anonymised was in fact not anonymised.
This could be bad news for the LS project. (do I have to mention Oxford Analytica ????)
The attached shows the options when activating a survey.
I suggest either :
A. SET "Save IP address" and "Save referrer URL" to NO when "Anonymised responses" is set to Yes
or
B. pop-up a message to say "WARNING: Your survey will only really be anonymised if you set "Save IP address" and "Save referrer URL" to NO" when "Anonymised responses" is set to Yes
- And of course option B advertises how to cheat the respondents!
My suggestion is option A.
-Graham-
Attachments:
The topic has been locked.
- advanz_lu
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 36
- Thank you received: 4
5 years 1 month ago #180259
by advanz_lu
Replied by advanz_lu on topic Anonymized responses
PS:
"jelo wrote: I'm against automatic restriction of saving referrer when activating anonymous mode.
In different environments other data (IP-adress, browser agent etc. ) could be used to identify people too. "
I don't think this is reasonable logic.
Just because it "might" be possible to join responses to respondants doesn't mean that LS should make it easy.
(particularly when the respondent is being told the responses are anonymised.
If there is a way outside LS to join the responses to respondants (ie information in the host log files that LS has no control over) then I don't see how the lawyers could make a case.
- but I'm not a lawyer!
-Graham-
"jelo wrote: I'm against automatic restriction of saving referrer when activating anonymous mode.
In different environments other data (IP-adress, browser agent etc. ) could be used to identify people too. "
I don't think this is reasonable logic.
Just because it "might" be possible to join responses to respondants doesn't mean that LS should make it easy.
(particularly when the respondent is being told the responses are anonymised.
If there is a way outside LS to join the responses to respondants (ie information in the host log files that LS has no control over) then I don't see how the lawyers could make a case.
- but I'm not a lawyer!
-Graham-
The following user(s) said Thank You: DenisChenu, holch
The topic has been locked.
- advanz_lu
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 36
- Thank you received: 4
5 years 1 month ago #180260
by advanz_lu
Replied by advanz_lu on topic Anonymized responses
In my example it's "just" a question of the referrer url so where's the problem of forcing this to "NO" when anonymised is "Yes" ?
-Graham-
-Graham-
The following user(s) said Thank You: DenisChenu
The topic has been locked.
- DenisChenu
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 13935
- Thank you received: 2551
5 years 1 month ago #180282
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic Anonymized responses
Personnaly i think you are right : we must not allow saving referrer url when a sentence like this is shown «The record of your survey responses does not contain any identifying information about you, unless a specific survey question explicitly asked for it. »
It's totally false
I really think it's a major issue
It's totally false
I really think it's a major issue
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The following user(s) said Thank You: holch
The topic has been locked.
- holch
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 11756
- Thank you received: 2753
5 years 1 month ago #180385
by holch
I answer at the LimeSurvey forum in my spare time, I'm not a LimeSurvey GmbH employee.
No support via private message.
Replied by holch on topic Anonymized responses
I agree as well. The "anonymous" mode in LS should be as anonymous as possible within the software.
You can still create other "anonymous" surveys by internal processes. But the mode provided by Limesurvey needs to be as anonymous as possible and the case described above, bug or feature, is definitely a breach when it comes to anonymity.
You can still create other "anonymous" surveys by internal processes. But the mode provided by Limesurvey needs to be as anonymous as possible and the case described above, bug or feature, is definitely a breach when it comes to anonymity.
I answer at the LimeSurvey forum in my spare time, I'm not a LimeSurvey GmbH employee.
No support via private message.
The following user(s) said Thank You: DenisChenu
The topic has been locked.
- advanz_lu
- Topic Author
- Offline
- Junior Member
Less
More
- Posts: 36
- Thank you received: 4
5 years 1 month ago - 5 years 1 month ago #180460
by advanz_lu
Replied by advanz_lu on topic Anonymized responses
One update:
I notice that in the survey responses (https://{survey_domain}/index.php?r=admin/responses/sa/browse/surveyid/{surveyID}) there is the startdate and datestamp.
Does this:
Contradict this:
( manual.limesurvey.org/Participant_settings )
Thanks,
-Graham-
I notice that in the survey responses (https://{survey_domain}/index.php?r=admin/responses/sa/browse/surveyid/{surveyID}) there is the startdate and datestamp.
Does this:
Contradict this:
( manual.limesurvey.org/Participant_settings )
Thanks,
-Graham-
Last edit: 5 years 1 month ago by advanz_lu.
The topic has been locked.
- holch
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 11756
- Thank you received: 2753
5 years 1 month ago - 5 years 1 month ago #180464
by holch
I answer at the LimeSurvey forum in my spare time, I'm not a LimeSurvey GmbH employee.
No support via private message.
Replied by holch on topic Anonymized responses
This should be definitely NOT be the case for anonymous surveys.
Please make a bug report, if you are on the latest release.
Please make a bug report, if you are on the latest release.
I answer at the LimeSurvey forum in my spare time, I'm not a LimeSurvey GmbH employee.
No support via private message.
Last edit: 5 years 1 month ago by holch.
The topic has been locked.