<div dir="ltr"><div class="gmail_default" style="font-family:monospace,monospace;font-size:small"><br></div><div class="gmail_extra"><br><div class="gmail_quote">On 14 April 2016 at 19:04, Kevin Krammer <span dir="ltr"><<a href="mailto:krammer@kde.org" target="_blank">krammer@kde.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="">On Thursday, 2016-04-14, 14:36:21, Jonathan Riddell wrote:<br>
> On Thu, Apr 14, 2016 at 04:18:30PM +0200, Thomas Pfeiffer wrote:<br>
> > Any potentially privacy-sensitive information transfer should be opt-in,<br>
> > not opt-out.<br>
> > I'd assume that the vast majority of users will allow it (given that it's<br>
> > not personally identifiable and they trust their distro), but opt-in puts<br>
> > you on the safe side.<br>
><br>
> What's privacy sensitive about it? It's a machine ID but not linked<br>
> to any other information other than IP address and there's no personal<br>
> information we can link it to.<br>
<br>
</span>I am with Thomas.<br>
<br>
While individually pieces of information aren't personal, they can be in<br>
combination.<br>
<br>
In this case the combination of a unique machine ID and IP address together<br>
with geolocation would allows us to track movement of machines.<br>
<br>
Movement profiles can often quite easily be used to identify the moving person.<br>
<br>
There was a huge scandal in the US a couple of years back in which a telecom<br>
company released fully anonymized (random unique IDs) mobile phone location<br>
tracks.<br>
Researchers who correlated positions with addresses were able to identify more<br>
than 80% of the telco customers with pretty good accuracy only shortly after.<br>
<br></blockquote><div><br><div class="gmail_default" style="font-family:monospace,monospace;font-size:small;display:inline">Sure. But I think Jonathan only mentioned _access_ to the IP data as needed for an Internet service, not logging it for any purpose.<br><br>In user stats only particular aspects are important, uniqueness is very useful to know the users better (to serve them better) but even without that, statistical information is handy too for us, who have to make informed decisions about further developments.<br><br>A completely different discussion would start as soon as some kind of (FOSS) app store is involved where users can have their accounts. Stats are paired with them or existing IDs created for different reason, with, say, KDE identity IDs. There's definitely opt-in needed.<br></div><div class="gmail_default" style="font-family:monospace,monospace;font-size:small;display:inline"></div><br><div class="gmail_default" style="font-family:monospace,monospace;font-size:small">At different level, any online capability of our native apps is potential means for tracking
if users don't trust us that we're not logging IP numbers. Yet, the
apps are typically downloaded and updated somehow via TCP/IP. At this level the access alone is an opt-in and manifestation of trust.<br><br></div><div class="gmail_default" style="font-family:monospace,monospace;font-size:small">Jonathan also said about machine ID because the software is maintained at system (machine-like) level. With container technologies such as Ubuntu Snaps (which I'd like to see working well with KDE software) it's possible to switch from a system to a user-account level. Yet, if the snap packages can be migrated with the account between machines, the connection between the user-identity and the machine/system becomes more blurry. <br></div><div class="gmail_default" style="font-family:monospace,monospace;font-size:small">In an interesting way for me this resonates with the ideas of form-factor-independence formulated within KDE.<br></div><div class="gmail_default" style="font-family:monospace,monospace;font-size:small"><br></div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<span class=""><font color="#888888"><br>
--<br>
Kevin Krammer, KDE developer, xdg-utils developer<br>
KDE user support, developer mentoring<br>
</font></span><br>_______________________________________________<br>
kde-community mailing list<br>
<a href="mailto:kde-community@kde.org">kde-community@kde.org</a><br>
<a href="https://mail.kde.org/mailman/listinfo/kde-community" rel="noreferrer" target="_blank">https://mail.kde.org/mailman/listinfo/kde-community</a><br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature">regards, Jaroslaw Staniek<br><br>KDE:<br>: A world-wide network of software engineers, artists, writers, translators<br>: and facilitators committed to Free Software development - <a href="http://kde.org" target="_blank">http://kde.org</a><br>Calligra Suite:<br>: A graphic art and office suite - <a href="http://calligra.org" target="_blank">http://calligra.org</a><br>Kexi:<br>: A visual database apps builder - <a href="http://calligra.org/kexi" target="_blank">http://calligra.org/kexi</a><br>Qt Certified Specialist:<br>: <a href="http://www.linkedin.com/in/jstaniek" target="_blank">http://www.linkedin.com/in/jstaniek</a></div>
</div></div>