<div dir="ltr"><div class="gmail_default" style="font-family:monospace,monospace;font-size:small"><br></div><div class="gmail_extra"><br><div class="gmail_quote">On 14 April 2016 at 17:30, Thomas Pfeiffer <span dir="ltr"><<a href="mailto:thomas.pfeiffer@kde.org" target="_blank">thomas.pfeiffer@kde.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="">On Donnerstag, 14. April 2016 14:36:21 CEST Jonathan Riddell wrote:<br>
> On Thu, Apr 14, 2016 at 04:18:30PM +0200, Thomas Pfeiffer wrote:<br>
> > Any potentially privacy-sensitive information transfer should be opt-in,<br>
> > not opt-out.<br>
> > I'd assume that the vast majority of users will allow it (given that it's<br>
> > not personally identifiable and they trust their distro), but opt-in puts<br>
> > you on the safe side.<br>
><br>
> What's privacy sensitive about it? It's a machine ID but not linked<br>
> to any other information other than IP address and there's no personal<br>
> information we can link it to.<br>
<br>
</span>It's still a unique identifier which can be used to track the machine. We might<br>
then combine it with others who also only collect the machine ID to create a<br>
profile.<br>
People can be very sensitive about these topics, especially since we've made<br>
privacy-aware users our main target audience.<br>
<br>
As I said: the vast majority would give us their consent anyway, but it just<br>
comes across as "nicer" if we ask.<br>
<br>
Martin's suggestion with "Make it explicit on the download page that we<br>
collect these data, and allow users to switch it off in privacy settings if<br>
they don't like us to do it" works as well, but then users would need to have<br>
a chance to turn it off /before/ the ID is sent the first time.<br></blockquote><div><br><div class="gmail_default" style="font-family:monospace,monospace;font-size:small">Sure. All depends how large is the population of our user base that is _this_ sensitive. <br></div><div class="gmail_default" style="font-family:monospace,monospace;font-size:small">Or not our but for specific project (Neon, {someappname}, {someservice})<br></div><div class="gmail_default" style="font-family:monospace,monospace;font-size:small"><br>Without any negative assumptions: As a software author I don't know many people in person who refuse to use browsers, refuse using e-shops and refuse visiting traditional shops that use video recording, using GSM/etc.<br></div><div class="gmail_default" style="font-family:monospace,monospace;font-size:small">I only heard about the stories with RMS and his secretary (I suppose he/she is tracked via browser instead of him -- even without cookies, tracking is possible).<br><br></div><div class="gmail_default" style="font-family:monospace,monospace;font-size:small">After thinking about that long ago; it's not even clear _who_ and at _what level_ someone makes the decision about defaults of privacy. Because the chain looks like:<br><br>1. Organization sets defaults for the org<br>2. Authors of the code in a subproject set the default for the code<br>3. Distributor decides about defaults set in the binaries<br><br></div><div class="gmail_default" style="font-family:monospace,monospace;font-size:small">One idea: KDE's tradition is integration of experience; how about a single "Do not track" setting for apps (not just for the Plasma) like it's the case for browsers? Questions about level of privacy could appear on the first run of Plasma or first run of a KF5 app for given $HOME. It may be that distributors that are very afraid of privacy, think Debian, may use the feature; others may easily disable it.<br></div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div class=""><div class="h5">_______________________________________________<br>
kde-community mailing list<br>
<a href="mailto:kde-community@kde.org">kde-community@kde.org</a><br>
<a href="https://mail.kde.org/mailman/listinfo/kde-community" rel="noreferrer" target="_blank">https://mail.kde.org/mailman/listinfo/kde-community</a></div></div></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature">regards, Jaroslaw Staniek<br><br>KDE:<br>: A world-wide network of software engineers, artists, writers, translators<br>: and facilitators committed to Free Software development - <a href="http://kde.org" target="_blank">http://kde.org</a><br>Calligra Suite:<br>: A graphic art and office suite - <a href="http://calligra.org" target="_blank">http://calligra.org</a><br>Kexi:<br>: A visual database apps builder - <a href="http://calligra.org/kexi" target="_blank">http://calligra.org/kexi</a><br>Qt Certified Specialist:<br>: <a href="http://www.linkedin.com/in/jstaniek" target="_blank">http://www.linkedin.com/in/jstaniek</a></div>
</div></div>