Difference between revisions of "Registration:User"

From Hackepedia
Jump to navigationJump to search
Line 1: Line 1:
 
== Being asked to Register ==
 
== Being asked to Register ==
  
So you've been asked to register somewhere. There are very few places you would to register your personal information, yet so many require it. Many attempts to bypass these unnecessary processes are made. We will assume in this example that the registration is on a web page, and it's asking for your personal information (Name, Address, etc).  
+
So you've been asked to register somewhere. There are very few places you would really need to register your personal information, yet so many require it. Many attempts to bypass these unnecessary processes are made. We will assume in this example that the registration is on a web page, and it's asking for your personal information (Name, Address, etc).  
  
 
#If you look at the URL in your browser, on the registration site, does it start with http://? If so, you should contact them and send them to [[Registration:Host]] and definitely do NOT register until they change their process.
 
#If you look at the URL in your browser, on the registration site, does it start with http://? If so, you should contact them and send them to [[Registration:Host]] and definitely do NOT register until they change their process.
 
#Do not be afraid to ask questions before filling out a form. How will your personal information be securely stored on their servers? What access control do they have around your personal information? Can anyone access your personal information, with no audit trail? This is the case in +90% of the environments this author has worked in.
 
#Do not be afraid to ask questions before filling out a form. How will your personal information be securely stored on their servers? What access control do they have around your personal information? Can anyone access your personal information, with no audit trail? This is the case in +90% of the environments this author has worked in.
#Read through their privacy policy and see if it appears suitable to you. Very few people do this, but it's amazing what you can find. Often companies will have phrases like "We may give your personal information to third party affiliates" which means they can sell your personal information to make a profit.  
+
#Read through their privacy policy and see if it appears suitable to you. Very few people do this, but it's amazing what you can find. Often companies will have phrases like "We may give your personal information to third party affiliates" which means they can sell your personal information to make a profit.
 
 
 
 
  
 
== External Reading ==
 
== External Reading ==
  
 
[http://www.privcom.gc.ca/legislation/02_06_01_01_e.asp Canadian Privacy Act] If you're a Canadian citizen, it is required that any business that asks you for your personal information publish a privacy policy that outlines what you they do with the personal information of your Canadian users.
 
[http://www.privcom.gc.ca/legislation/02_06_01_01_e.asp Canadian Privacy Act] If you're a Canadian citizen, it is required that any business that asks you for your personal information publish a privacy policy that outlines what you they do with the personal information of your Canadian users.

Revision as of 09:14, 9 October 2005

Being asked to Register

So you've been asked to register somewhere. There are very few places you would really need to register your personal information, yet so many require it. Many attempts to bypass these unnecessary processes are made. We will assume in this example that the registration is on a web page, and it's asking for your personal information (Name, Address, etc).

  1. If you look at the URL in your browser, on the registration site, does it start with http://? If so, you should contact them and send them to Registration:Host and definitely do NOT register until they change their process.
  2. Do not be afraid to ask questions before filling out a form. How will your personal information be securely stored on their servers? What access control do they have around your personal information? Can anyone access your personal information, with no audit trail? This is the case in +90% of the environments this author has worked in.
  3. Read through their privacy policy and see if it appears suitable to you. Very few people do this, but it's amazing what you can find. Often companies will have phrases like "We may give your personal information to third party affiliates" which means they can sell your personal information to make a profit.

External Reading

Canadian Privacy Act If you're a Canadian citizen, it is required that any business that asks you for your personal information publish a privacy policy that outlines what you they do with the personal information of your Canadian users.