WIP: Add page for hide sensitive info by Tiana01 · Pull Request #112 · BitcoinDesign/Guide

Tiana01 · 2021-01-12T13:20:43Z

type: page
title: Hide Sensitive Information
permalink: /guide/payments/hide-sensitive-information
file: /guide/payments/hide-sensitive-info.md

Problem

Designing for physical privacy and security is sometimes overlooked in the design process. By owning bitcoin, you are in a position of being your own bank, and the responsibility of securing and protecting your funds falls on you. With this in mind, perhaps physical privacy should be looked at more seriously. So in a scenario where a user finds themselves in an uncomfortable environment, being able to ensure their immediate safety or comfort by protecting the sensitive information on their wallets, could come in handy.

Solution

This page should would serve as an introduction to physical privacy for designers, understanding why physical privacy should be seen as important and how this can be achieved in the wallet designs

Assumptions about the reader

Has read the getting started chapter
Knows basics about bitcoin wallets

Result

Preview draft on site

ConorOkus · 2021-01-13T16:26:27Z

+
+The hide icon / button, which is usually displayed within close reach of the balance itself, is used to quickly and easily hide and reveal wallet information by tapping or clicking on it.
+
+![hidden by eye icon](/assets/images/payments/hide-info-hidden-by-eye-icon.png)


Can you consider making this a bit bigger as it's difficult to know what to look at without zooming in, especially on mobile?

Good point! I will work on this

ConorOkus · 2021-01-13T16:29:23Z

+
+## Consider removing the hide toggle from the homepage
+
+Having the show/hide button right on the main screen make things quite obvious for someone who has access to your device to press unhide. A solution would be to move the hide toggle away from the home screen and into the app settings. This way, if someone has access to your device and opens the app, they may not immediately know how to reveal the hidden information as it is not as obvious as the previous solutions.


Might be worth also including what information will be hidden as well.

Alright, that's noted

pavlenex

Congratulations and thanks for your first PR. 🎉

Although for me it's a bit hard to see in which context this will be related to the payment guide, it's certainly great piece of information. As payment guide progresses, we may be able to agree on the structure of content, but since we still don't have the context, we can change that if needed in the future.

I've made a few minor suggestions and added a few recommendations mostly around content simplification and a bit too informal language used on two places.

pavlenex · 2021-01-14T10:38:13Z

+
+Cons
+
+- It may be annoying having to repeatedly put in your min when ever you want to reveal your information especially if you do so often


It may be annoying having to repeatedly put in your min when ever you want to reveal your information especially if you do so often

Too informal imo. Annoying, also unsure what this means put in your min when ever you want to reveal your information

pavlenex · 2021-01-14T10:41:55Z

+
+# Hiding Sensitive Information
+
+Imagine this scenario. You are in a public place, and you need to make a payment using your bitcoin wallet. You open your wallet on your phone, but you don’t feel comfortable having your address and balance information clearly visible to strangers who may be looking over your shoulder. Hence by giving users the ability to hide sensitive information in their wallet if desired, they gain an added sense of privacy and security when using the app in public.


clearly visible to strangers who may be looking over your shoulder

Video surveillance can be another attack vector to add

That makes an excellent point! considering that video surveillance is quite common nowadays.

pavlenex · 2021-01-14T10:44:42Z

+
+## Why is this pattern important to designers?
+
+Privacy in bitcoin payments goes far beyond hiding balances and other sensitive information, the privacy by design framework states that privacy should be incorporated and built into products by default. This way, whether or not the user is concerned with their data privacy, they would always be protected through good UX.


This is great paragraph.

through good UX.

Perhaps UI?

Do we have a good resource we can link to for "privacy by design framework"? If we mention a framework, we should make it easy to read up on it.

This one might be okay - https://www.ipc.on.ca/wp-content/uploads/Resources/7foundationalprinciples.pdf

pavlenex · 2021-01-14T10:46:49Z

+
+## Entering a pin to unveil information
+
+A problem that seemed to arise throughout each implementation was that is was as easy to reverse the hidden state as it was to enable it. This may be for convenience sake, however, if you are in a situation where you are concerned about unauthorized access by someone who has your device, once hidden perhaps you should be only able to unhide if a PIN or password has been entered. This could therefore reaffirm the identity of the wallet owner for extra security.


This may be for convenience sake, however, if you are in a situation where you are concerned about unauthorized access by someone who has your device, once hidden perhaps you should be only able to unhide if a PIN or password has been entered.

This sentence seems a bit lengthy and wordy, perhaps you can try to break it down a bit and simplify.

Alright, noted!

Co-authored-by: Christoph Ono <chri@sto.ph>

Co-authored-by: Pavlenex <pavle@pavle.org>

Co-authored-by: Pavlenex <pavle@pavle.org> Co-authored-by: Christoph Ono <chri@sto.ph>

…a01/Guide into feature/hide-sensitive-info

GBKS · 2021-01-18T08:50:28Z

Really like the new images. Could you please also make the image sources available so they can also be something we can collaborate on like we do with text? What I have done on my pages is to have all images sources in a Figma file and link that in a comment at the top of the page (doesn't have to be Figma). Also outlined an example here.

Small typo on the images. It should be "received", not "recieved".

Thanks for patiently addressing all the feedback.

BitcoinErrorLog · 2021-01-18T09:28:31Z

The tricky part with privacy modes, is people know they exist.

Maybe you can survive a wrench attack if you give them your hidden wallet that only actually has 10% of your net worth, or?

You can't just have a hidden balance, or one hidden wallet. You need at least 3.

Default open wallet - hot money only, probably LN with a max total
Wrench offering wallet - custom % of hidden cold wallet?
Top secret hidden cold wallet
But mgmt of these would need to be automatic, and the method for retrieving a "wrench wallet" would need to be same as cold wallet, so a multi-PIN/pw setup.

ConorOkus · 2021-05-11T20:19:38Z

I would like to add this to a page I've been working on here on protecting a wallet. @Tiana01 how do you feel about adding this content there?

pavlenex · 2021-05-14T08:18:40Z

@ConorOkus Great idea, I think the reason we left this PR stale is that we couldn't find a suitable place for it. Go for it, but if you know how please add @Tiana01 as co-author of the commits for that section. I think portions of it would indeed fit perfectly into the onboarding section.

pavlenex · 2021-05-17T16:07:58Z

Closing this in favour of #302, thanks @ConorOkus for adding this great PR to a proper place and for crediting @Tiana01's commits in your PR.

Tiana01 added 2 commits January 12, 2021 13:07

docs(payments): update images

9f4f085

Merge branch 'master' into feature/hide-sensitive-info

4207845

johnsBeharry added the payments label Jan 12, 2021

Tiana01 added 4 commits January 12, 2021 14:33

Update hide-sensitive-info.md

b45e897

docs(payments): update header image

1436bf7

Update hide-sensitive-info.md

ee03616

Update hide-sensitive-info.md

9ca35d7

ConorOkus reviewed Jan 13, 2021

View reviewed changes

pavlenex reviewed Jan 14, 2021

View reviewed changes

GBKS reviewed Jan 14, 2021

View reviewed changes

Comment thread guide/payments/hide-sensitive-info.md Outdated

GBKS reviewed Jan 14, 2021

View reviewed changes

Comment thread guide/payments/hide-sensitive-info.md Outdated

GBKS reviewed Jan 14, 2021

View reviewed changes

Comment thread guide/payments/hide-sensitive-info.md

Tiana01 and others added 8 commits January 14, 2021 17:02

docs(payments): update image sizes and color

45397ac

Update hide-sensitive-info.md

730453d

Apply suggestions from code review

dd1180c

Co-authored-by: Christoph Ono <chri@sto.ph>

Update guide/payments/hide-sensitive-info.md

897ed34

Co-authored-by: Pavlenex <pavle@pavle.org>

Apply suggestions from code review

2b27aae

Co-authored-by: Pavlenex <pavle@pavle.org> Co-authored-by: Christoph Ono <chri@sto.ph>

Update hide-sensitive-info.md

087d0c0

Merge branch 'feature/hide-sensitive-info' of https://github.com/Tian…

e6b5132

…a01/Guide into feature/hide-sensitive-info

docs(pyments): update gifs

b89af04

Tiana01 added 7 commits January 18, 2021 10:53

docs(payments): update gif and references

d56bc0b

docs(payments): update fix typo

c9d28be

Update hide-sensitive-info.md

a701d58

Update hide-sensitive-info.md

f14aa64

Update hide-sensitive-info.md

a418c9d

docs(payments): update gif layout

c1c8459

docs(payments): update gif layout

3b60452

Tiana01 added 3 commits January 18, 2021 12:42

docs(payments):update gif layout

5f0d96d

Update hide-sensitive-info.md

8babfa7

Update hide-sensitive-info.md

914ab5f

GBKS mentioned this pull request Feb 23, 2021

Create a design template for case study pages #149

Closed

johnsBeharry mentioned this pull request Mar 17, 2021

Create Sending bitcoin page #181

Merged

ConorOkus mentioned this pull request May 12, 2021

Adds multiple pages to the Onboarding chapter #302

Merged

pavlenex closed this May 17, 2021


		The hide icon / button, which is usually displayed within close reach of the balance itself, is used to quickly and easily hide and reveal wallet information by tapping or clicking on it.

		![hidden by eye icon](/assets/images/payments/hide-info-hidden-by-eye-icon.png)


		## Consider removing the hide toggle from the homepage

		Having the show/hide button right on the main screen make things quite obvious for someone who has access to your device to press unhide. A solution would be to move the hide toggle away from the home screen and into the app settings. This way, if someone has access to your device and opens the app, they may not immediately know how to reveal the hidden information as it is not as obvious as the previous solutions.


		Cons

		- It may be annoying having to repeatedly put in your min when ever you want to reveal your information especially if you do so often


		# Hiding Sensitive Information

		Imagine this scenario. You are in a public place, and you need to make a payment using your bitcoin wallet. You open your wallet on your phone, but you don’t feel comfortable having your address and balance information clearly visible to strangers who may be looking over your shoulder. Hence by giving users the ability to hide sensitive information in their wallet if desired, they gain an added sense of privacy and security when using the app in public.


		## Why is this pattern important to designers?

		Privacy in bitcoin payments goes far beyond hiding balances and other sensitive information, the privacy by design framework states that privacy should be incorporated and built into products by default. This way, whether or not the user is concerned with their data privacy, they would always be protected through good UX.


		## Entering a pin to unveil information

		A problem that seemed to arise throughout each implementation was that is was as easy to reverse the hidden state as it was to enable it. This may be for convenience sake, however, if you are in a situation where you are concerned about unauthorized access by someone who has your device, once hidden perhaps you should be only able to unhide if a PIN or password has been entered. This could therefore reaffirm the identity of the wallet owner for extra security.

Uh oh!

Conversation

Tiana01 commented Jan 12, 2021 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem

Solution

Assumptions about the reader

Result

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

pavlenex left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

GBKS commented Jan 18, 2021

Uh oh!

BitcoinErrorLog commented Jan 18, 2021

Uh oh!

ConorOkus commented May 11, 2021

Uh oh!

pavlenex commented May 14, 2021

Uh oh!

pavlenex commented May 17, 2021

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

Tiana01 commented Jan 12, 2021 •

edited

Loading