On Wed, Jul 03, 2024 at 06:39:04AM -0400, Neal Gompa wrote: > On Wed, Jul 3, 2024 at 4:53 AM Richard W.M. Jones <rjones@xxxxxxxxxx> wrote: > > > > On Tue, Jul 02, 2024 at 06:32:17PM +0200, Ralf Corsépius wrote: > > > > > > > > > Am 02.07.24 um 4:44 PM schrieb Michael Catanzaro: > > > >On Tue, Jul 2 2024 at 04:05:11 PM +02:00:00, Ralf Corsépius > > > ><rc040203@xxxxxxxxxx> wrote: > > > >>Is this the same cheat as with Fedora's "installation ids" and Firefox's > > > >>"phone home" features? > > > >> > > > >>This stuff is activated by default, which means at the point a user > > > >>deactivates them, he already is "collected". > > > > > > > >This metrics system will be really disabled until it is enabled. > > > > > > > >This only works because the dnf installation counting metrics are > > > >enabled by default, though. > > > > > > IMO, this and firefox's behavior needs to be changed, ASAP. Their > > > behavior is intolerable. > > > > > > >Without the dnf metrics to compare to, we wouldn't be able to know > > > >how many users agree to enable metrics collection unless we send > > > >one metrics event to indicate that metrics are being turned off. > > > >This is going to be a pretty imperfect comparison, but it will > > > >have to suffice because I figured an "I don't want to enable > > > >metrics" metric would not be well-received. > > > > > > My point is: Any "metrics", which makes individuals identifiable > > > must be strictly optional. One way to make this possible would be to > > > make the packages implementing this strictly optional. > > > > And to make this point clearer, in many countries this isn't just a > > "nice to have", it's the law that it should work this way. > > > > That is clearly not true, or otherwise Microsoft Windows and Apple > macOS/iOS would be architected quite differently. I obviously can't comment on what Microsoft or Apple do or don't do, but GDPR is very clear on consent: https://www.gdpreu.org/the-regulation/key-concepts/consent/ and in UK law: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/lawful-basis-for-processing/consent/ > Not being active is not the same thing as requiring a particular > software architecture. There's no requirement for software to be written in any particular way, but it has to obey the law. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization blog: http://rwmj.wordpress.com nbdkit - Flexible, fast NBD server with plugins https://gitlab.com/nbdkit/nbdkit -- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
