Add a new idea Subscribe
Status Not under consideration
Workspace * IBM Cloud Ideas
Categories Administration
Created by Guest
Created on Oct 9, 2019

RELATED IDEAS

Remove third-party JavaScript from the dashboard

Loading the "new" cloud.ibm.com portal loads third-party JavaScript and tracking beacons from the following domains:

 

  • go-mpulse.net
  • optimizely.com
  • segment.com
  • segment.io
  • appcues.com
  • liveperson.net
  • braze.com
  • lpsnmedia.net
  • crwdcntrl.net

 

If any one of these vendors is ever compromised into serving malicious JavaScript, they could trivially hoover up all of the credentials and other highly-sensitive information in the portal.

 

Loading the portal with an ad-blocker enabled routinely breaks the portal.

 

You're an enterprise B2B company selling products that cost an enormous amount of money; I can't believe it makes financial sense to take this very real risk to your customers' security for whatever pittance you get from all of these advertising gizmos.

 

Please strongly consider following the lead of all other major IaaS providers and removing all third-party JavaScript from your web portal.

Idea priority Urgent
  • Guest
    Nov 27, 2019

    Hi, I appreciate and understand your desire for security and privacy without compromising the experience on cloud.ibm.com. When you log in to your account there, you can adjust your privacy settings if you click on your profile avatar in the top right corner and click privacy.

    As for the third party vendors that we rely on to provide functionality in the console, IBM has enforced strict guidelines about data handling and privacy with each of them in accordance with the General Data Protection Regulation (GDPR) that went into effect last year.

    Reply

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.