Re:Webmaker for Android
by hardwaresofton on Monday August 17, 2015 @10:59AM
(#10073413)
Maybe this could be helpful:
https://github.com/mozilla/webmaker-android
[EDIT] - Had the wrong link up before, was to the repo for the website
They're stored in a heroku app: https://webmaker-api.herokuapp.com/users/717/projects/628/
Which is open source https://github.com/mozilla/api.webmaker.org
I don't know for certain, but it feels as though the only possibility is that Mozilla is hosting the content.
It's obviously not being stored on the phone, since it's meant for other people to be able to access. It seems unlikely that it wouldn't be mentioned if it were using any non-Mozilla hosting.
It's probably stored in plaintext, unsecured with the user's Mozilla account (whose password is also used to unsecure his stored passwords and browser history, which means that if he hands his information to his buddy or secretary to enable him to update a page, he'll also be handing that buddy or secretary his entire online identity).
But maybe I'm wrong, and it's stored in an encrypted hash-addressed data store, where shared links include the necessary keys.
There are levels of security; it's fine for Webmaker not to be suitable for, e.g., human-rights activists in Burma. But it should not be possible for one data breach to reveal everyone's activity everywhere.
https://webmaker.org/
The "Privacy" link is generic and also doesn't explain anything.
How in hell do you think you can launch a social service without answering any of these questions in this day and age? Have you learned nothing from the Hello rollout?