[Privacy] A real-looking Dutch mobile number is printed in the public documentation #605

New issue

Closed

opened 2026-07-22 16:19:51 +00:00 by brenno · 0 comments

brenno commented

2026-07-22 16:19:51 +00:00

Owner

Found in the pre-publication privacy review and verified in the main loop.

Evidence: 06-24681357 appears in docs/USER_GUIDE.md:1315, docs/design/OCIWACHT.md:412 and CHANGELOG.md:3355. The project own rule flags that number as a finding: test/privacy_phone_rules_test.dart:71 expects a report on exactly Contactpersoon, mobiel 06-24681357. The allow-list in docs/design/OCIWACHT.md:412 names only the reserved drama ranges for the US (555-01xx), the UK (07700 900xxx) and Germany (+49 30 23125 xx) — there is no Dutch fiction range, because the Dutch regulator does not reserve one.

Two lines below it, docs/USER_GUIDE.md:1317 reads: "(You will notice this manual never prints a real-looking international number. That is deliberate — and the check would flag it if it did.)"

Why the corpus gate does not catch it: test/privacy_false_positive_corpus_test.dart:130 scans Directory("docs") only — so not README.md, CHANGELOG.md or AUDIT_RESPONSE.md — and asserts only on result.certain, while the national phone format scores waarschijnlijk and slips through.

Why this matters now: this number may belong to a real person, and it is about to be permanently public in a manual that promises on the same page that this does not happen. It is precisely the self-undermining the scanner exists to prevent, and it is also bundled inside the app.

Proposal: replace all three occurrences with an unmistakably invented value, and extend the corpus gate to the root *.md files and to waarschijnlijk for contact.phone.

Found in the pre-publication privacy review and verified in the main loop. **Evidence:** `06-24681357` appears in `docs/USER_GUIDE.md:1315`, `docs/design/OCIWACHT.md:412` and `CHANGELOG.md:3355`. The project own rule flags that number as a finding: `test/privacy_phone_rules_test.dart:71` expects a report on exactly `Contactpersoon, mobiel 06-24681357`. The allow-list in `docs/design/OCIWACHT.md:412` names only the reserved drama ranges for the US (`555-01xx`), the UK (`07700 900xxx`) and Germany (`+49 30 23125 xx`) — there is no Dutch fiction range, because the Dutch regulator does not reserve one. Two lines below it, `docs/USER_GUIDE.md:1317` reads: "(You will notice this manual **never prints a real-looking international number**. That is deliberate — and the check would flag it if it did.)" **Why the corpus gate does not catch it:** `test/privacy_false_positive_corpus_test.dart:130` scans `Directory("docs")` only — so not `README.md`, `CHANGELOG.md` or `AUDIT_RESPONSE.md` — and asserts only on `result.certain`, while the national phone format scores `waarschijnlijk` and slips through. **Why this matters now:** this number may belong to a real person, and it is about to be permanently public in a manual that promises on the same page that this does not happen. It is precisely the self-undermining the scanner exists to prevent, and it is also bundled inside the app. **Proposal:** replace all three occurrences with an unmistakably invented value, and extend the corpus gate to the root `*.md` files and to `waarschijnlijk` for `contact.phone`.

brenno added the

bug

privacy

labels

2026-07-22 16:19:51 +00:00

brenno referenced this issue from a commit

2026-07-22 16:40:31 +00:00

fix(privacy): haal het echt ogende telefoonnummer uit de publieke documentatie

brenno referenced this issue from a pull request that will close it,

2026-07-22 16:40:51 +00:00

fix(privacy): echt ogend telefoonnummer uit de publieke documentatie (#605) #649

brenno closed this issue