Skip to main content

Data Minimisation Potential for Timestamps in Git: An Empirical Analysis of User Configurations

  • Conference paper
  • First Online:
ICT Systems Security and Privacy Protection (SEC 2022)

Abstract

With the increasing digitisation, more and more of our activities leave digital traces. This is especially true for our work life. Data protection regulations demand the consideration of employees’ right to privacy and that the recorded data is necessary and proportionate for the intended purpose. Prior work indicates that standard software commonly used in workplace environments records user activities in excessive detail. A major part of this are timestamps, whose temporal contextualisation facilitates monitoring. Applying data minimisation on timestamps is however dependent on an understanding of their necessity. We provide large-scale real-world evidence of user demand for timestamp precision. We analysed over 20 000 Git configuration files published on GitHub with regard to date-related customisation in output and filtering, and found that a large proportion of users choose customisations with lower or adaptive precision: almost 90% of chosen output formats for subcommand aliases use reduced or adaptive precision and about 75% of date filters use day precision or less. We believe that this is evidence for the viability of timestamp minimisation. We evaluate possible privacy gains and functionality losses and present a tool to reduce Git dates.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Subscribe and save

Springer+ Basic
EUR 32.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or Ebook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 89.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 119.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 119.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

References

  1. Burkert, C.: gitconfig date study dataset (2022). https://github.com/EMPRIDEVOPS/gitconfig-study-dataset

  2. Burkert, C., Federrath, H.: Towards minimising timestamp usage in application software. In: Pérez-Solà, C., Navarro-Arribas, G., Biryukov, A., Garcia-Alfaro, J. (eds.) Data Privacy Management, Cryptocurrencies and Blockchain Technology, DPM/CBT -2019. LNCS, vol. 11737, pp. 138–155. Springer, Cham (2019). https://doi.org/10.1007/978-3-030-31500-9_9

  3. Claes, M., Mäntylä, M.V., Kuutila, M., Adams, B.: Do programmers work at night or during the weekend? In: ICSE. ACM (2018)

    Google Scholar 

  4. Drakonakis, K., Ilia, P., Ioannidis, S., Polakis, J.: Please forget where I was last summer: the privacy risks of public location (meta)data. In: NDSS (2019)

    Google Scholar 

  5. EMPRI-DEVOPS: git-privacy. https://github.com/EMPRI-DEVOPS/git-privacy

  6. Eyolfson, J., Tan, L., Lam, P.: Do time of day and developer experience affect commit bugginess? In: MSR. ACM (2011)

    Google Scholar 

  7. Game World Observer: Xsolla cites growth rate slowdown as reason for layoffs, CEO’s tweet causes further controversy (2021). https://gameworldobserver.com/?p=10949

  8. Git: Git Source Code (2021). https://github.com/git/git

  9. Git: Reference (2022). https://git-scm.com/docs. Accessed 28 March 2022

  10. GitHub Docs: Best practices for integrators (2021). https://docs.github.com/en/rest/guides/best-practices-for-integrators. Accessed 24 Sep 2021

  11. GitHub Docs: Search API (2021). https://docs.github.com/en/rest/reference/ search. Accessed 24 Sep 2021

  12. Gousios, G.: The GHTorrent dataset and tool suite. In. MSR 2013 (2013)

    Google Scholar 

  13. Mavriki, P., Karyda, M.: Profiling with big data: identifying privacy implications for individuals, groups and society. In: MCIS (2018)

    Google Scholar 

  14. Senarath, A., Arachchilage, N.A.G.: Understanding software developers’ approach towards implementing data minimization (2018). https://arxiv.org/abs/1808.01479

  15. Slagell, A.J., Lakkaraju, K., Luo, K.: FLAIM: a multi-level anonymization framework for computer and network logs. In: LISA, pp. 63–77. USENIX (2006)

    Google Scholar 

  16. Traullé, B., Dalle, J.-M.: The evolution of developer work rhythms. In: Staab, S., Koltsova, O., Ignatov, D.I. (eds.) Social Informatics, SocInfo 2018. LNCS, vol. 11185, pp. 420–438. Springer, Cham (2018). https://doi.org/10.1007/978-3-030-01129-1_26

  17. Wright, I., Ziegler, A.: The standard coder: a machine learning approach to measuring the effort required to produce source code change. In: RAISE (2019)

    Google Scholar 

Download references

Acknowledgements

We would like to thank the anonymous reviewers and Vaclav Matyas for their constructive and very helpful suggestions to improve this paper. The work is supported by the German Federal Ministry of Education and Research (BMBF) as part of the project Employee Privacy in Development and Operations (EMPRI-DEVOPS) under grant 16KIS0922K.

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Christian Burkert .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2022 IFIP International Federation for Information Processing

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Burkert, C., Ansohn McDougall, J., Federrath, H. (2022). Data Minimisation Potential for Timestamps in Git: An Empirical Analysis of User Configurations. In: Meng, W., Fischer-Hübner, S., Jensen, C.D. (eds) ICT Systems Security and Privacy Protection. SEC 2022. IFIP Advances in Information and Communication Technology, vol 648. Springer, Cham. https://doi.org/10.1007/978-3-031-06975-8_19

Download citation

  • DOI: https://doi.org/10.1007/978-3-031-06975-8_19

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-031-06974-1

  • Online ISBN: 978-3-031-06975-8

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics