Live data from Hacker News

Companies must stop using Google Analytics

imy.se

651–660 of 672 posts

Re: Companies must stop using Google Analytics

#655

Earlier quoted context omitted.

If it's shared, it's not a salt. The term of art in that case is 'pepper'.

That's backwards. > In cryptography, a pepper is a secret added to an input such as a password during hashing with a cryptographic hash function. This value differs from a salt in that it is not stored alongside a password hash, but rather the pepper is kept separate in some other medium, such as a Hardware Security Module. https://en.wikipedia.org/wiki/Pepper_(cryptography)

Apparently we understand words differently.

A salt is a unique random value added to each value when hashing. Obviously, such a salt needs to be stored alongside each value because it’s random and unique. If you don’t store it how could you possibly ever figure out what it is?

A pepper is a shared value added to lots of different things before they are hashed. It isn’t unique to each value, so it doesn’t need to be stored alongside them. Although it still needs to be stored somewhere. But hey, you could also store it alongside every value you store. This is a thing sometimes done when you do ‘per user’ pepper, where for example the pepper is itself a a username or something - so your pepper is also in the database alongside the passwords - but that doesn’t make it a salt.

If you are using the same piece of data to season multiple things before hashing, you are using ‘pepper’ not ‘salt’.

Re: Companies must stop using Google Analytics

#656

Earlier quoted context omitted.

That's backwards. > In cryptography, a pepper is a secret added to an input such as a password during hashing with a cryptographic hash function. This value differs from a salt in that it is not stored alongside a password hash, but rather the pepper is kept separate in some other medium, such as a Hardware Security Module. https://en.wikipedia.org/wiki/Pepper_(cryptography)

Apparently we understand words differently. A salt is a unique random value added to each value when hashing. Obviously, such a salt needs to be stored alongside each value because it’s random and unique. If you don’t store it how could you possibly ever figure out what it is? A pepper is a shared value added to lots of different things before they are hashed. It isn’t unique to each value, so it doesn’t need to be s…

I think you may be alone in understanding the words "pepper" and "salt" this way.

Re: Companies must stop using Google Analytics

#657

Earlier quoted context omitted.

I'm guessing you're junior, or you'd have more control over these meetings, or have the ability to decline ones that you believed weren't going to be good use of your time. Having good meeting culture requires everyone involved to improve it. If you want meetings to be better, set them up, add an agenda and objectives, and run the meeting so that it's effective. If you can't run the meeting, if it doesn't have an age…

Getting real "toxic positivity" vibes off your whole line of arguments...

Being proactive in changing the situation isn't toxic positivity, and being empathetic with folks in different jobs isn't toxic positivity either.

Assuming people are assholes, and blaming them for situations is just run of the mill toxic. Working through side-channels rather than addressing a problem is also run of the mill toxic.

Re: Companies must stop using Google Analytics

#658

Earlier quoted context omitted.

Getting real "toxic positivity" vibes off your whole line of arguments...

Being proactive in changing the situation isn't toxic positivity, and being empathetic with folks in different jobs isn't toxic positivity either. Assuming people are assholes, and blaming them for situations is just run of the mill toxic. Working through side-channels rather than addressing a problem is also run of the mill toxic.

Nah your stuff came across as blind tolerance which is just pointless unconstructive and solely to placate people's feelings (in such instances unjustifiable/irrational).

Just because Joe or Judy "feels" a certain way doesn't mean it should actually have bearing on anything. Really...

Enough placating those with the least logic and self control.

Re: Companies must stop using Google Analytics

#659
post #73
post #45

Who needs analytics? I'm confused. When I worked at companies using google analytics, 99.9% of the time they could have gotten this data from server logs with something like awstats or goaccess. To this day, I still don't get what's the point of embedding some javascript to do extra-requests or a tracking pixel, when the data was already given once.

With server side tracking you're not able to identify and properly track non-logged in users. GA (and other client-side tools) take care of this, via cookies. Additionally, a common argument is that the server side logs contain a lot of logs from bots/crawlers and GA (and alike) can filter them. The other side of the coin is that GA (and alike) are not able to track users with Adblockers. EDIT: not sure why I'm downv…

For the vast majority of sites I would bet using IP address alone would be enough to track enough users individually over their single sessions to be statistically useful.

Does anyone have any experience? How bad does CG-NAT mess this up over a large enough cohort of users?

Post reply on HN