pesco/mixminion — comment on commit 37d21ebbb066b39aa300600f99ec610540185106
File:  line 0
By pesco:

i admit i didn't notice the implication until after i'd written the thing.

superficially, the data is exposed only to whoever can view the munin graphs. i.e. typically the site administrator.
however, munin isn't very security-conscious.
if you gather the input over the network, we're talking about ip-based access control and no encryption by default.
then again, if you can exploit that attack vector, you can probably observe the packets themselves going over the network.

anyway, i guess it would be easy to modify to return stats with coarser granularity.

FTR: as it stands, data is sampled every five minutes.