El filtro del navegador de America.gov mantiene nombres e identificaciones gubernamentales genéricas
El código del cliente inspeccionado agrega cuatro categorías al conjunto de retención predeterminado de Rampart, mientras que la ficha técnica del modelo dice que los identificadores gubernamentales genéricos no tienen un mecanismo de respaldo determinista.
By Ryan Merket · Published · Updated
RUNTIMEWIRE INVESTIGATION — Original analysis
Original reporting by RuntimeWire, based on documents, testing.
Por qué importa
Un keep-set decide qué ocurre después de la detección: el código del navegador inspeccionado de America.gov parece eximir nombres, URLs e identificaciones gubernamentales genéricas de la política de redacción predeterminada de Rampart. La ficha del modelo informa solo alrededor de 67.6% de recall en una prueba de identificación gubernamental estructurada y dice que esos identificadores carecen de un mecanismo de respaldo determinístico, mientras que la revisión del código no establece qué llega a los servidores ni qué controles del lado del servidor se aplican.
Reporting record
Finding
America.gov's inspected browser code adds GIVEN_NAME, SURNAME, URL and GOVERNMENT_ID to Rampart's default keep-set, excluding spans with those labels from redaction or blocking in the inspected paths.
How we verified
Methods: documents, testing.
America.gov's client-side privacy wrapper, shared filter implementation and composer/PDF processing code; Rampart's published model card; and a synthetic-label check of four inspected span-selection functions.
Inspected America.gov's client-side JavaScript, traced the keep-set through typed-message privacy checks and PDF and feedback text-scrubbing paths, and checked four span-selection functions using synthetic labels. Compared the configuration with Rampart's published defaults. No personal identifiers were submitted.
Evidence
Reproduction
RuntimeWire independently reproduced the core finding.
Use synthetic labels to check the four inspected span-selection functions: GIVEN_NAME, SURNAME, URL and GOVERNMENT_ID were excluded from selection, while SSN, PASSPORT, DRIVERS_LICENSE, EMAIL, PHONE and BANK_ACCOUNT remained selected.
Para qué sirve una ficha de modelo de Rampart…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.