Hacker News new | ask | show | jobs
by md8z 1707 days ago
"their telemetry (and, more generally, spying) are in a different league from Windows', and (2) users are capable of choosing to use another distro"

I just find this to be not convincing, sorry. It doesn't matter that it's in a different league, they're always going to be different because the requirements are different. And it doesn't really matter that users can switch to a different distro either, what seems to be happening is that the more popular the distro gets with Windows users, the more telemetry it seems to gain. Saying "you can just switch" is more of the same reason why Linux is not popular to begin with. People don't want to keep switching to a new distro every 6 months to evade crapware because some vendor went rogue. So they just suck it up and deal with it all up front from Microsoft.

"For almost everyone, except possibly you, this is a huge point."

Please avoid making these assumptions, see my other comment. This is not about me because I don't use Ubuntu, this would be specifically about those Ubuntu users.

"Opt-out and opt-in anything are completely different, both in a conceptual sense, and in an actual privacy sense."

I get what you're saying but this is one of those things that just doesn't work when it's opt-in. Using one of your examples, social security is another thing that would not work if it was opt-in.

"we're concerned with Microsoft's behavior as a whole"

I don't see why this matters. Microsoft is a huge company, you can cherry pick examples of bad things and good things they do to try to prove a point, just like with the Linux community. In fact the whole point of open source seems to be that companies can commercially exploit the source code without paying. I get what you're saying about the KDE Foundation but that's just it: you've made a value judgement based on their privacy policy, other users can do the same thing about Microsoft and come to the same conclusions, and in fact millions (billions?) of them already do.

"This issue has been around for years and noticed by thousands of people on the internet"

So have many other bugs unfortunately. I just haven't seen any reason to suggest that this one is intentional versus any other bug, what you've made is a guess. If you have some hard data I'd love to see it.

"A snide and absolutely useless reply. My point, which you conveniently missed, was that I don't understand what Ubuntu or Microsoft collect because their privacy policies are obtuse, not because I haven't read them."

Please stop assuming bad faith, this is not helpful. If you're having trouble understanding it then let's go through it together and we can try to clarify. It should be easy enough for us if we put our heads together, those policies are written for laypeople.

"'Canonical may collect non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, referring site, and the date and time of each visitor request.' ...that doesn't enumerate the complete list of "non-personally-identifying information" collected.."

So that would be whatever your web browser transmits, not strictly under the control of Canonical. I suspect that's why they can't say more there.

"and all of that applies a hundred times more to Microsoft and Windows"

If you could mention some things you're confused about then we could work through it. Just let me know, thanks.

"I also noticed that you didn't include a link to the Microsoft telemetry privacy policy."

Well no I figured you could find it because it's pretty prominent when you install Microsoft software or use any of their services. Most companies won't have a "telemetry policy" and I have no idea where you go that term, it always ends up in the privacy policy. And you did post the right link to that privacy statement, that's what I would have posted.

"it is so vague as to not allow you to understand what is actually being collected"

Again please mention what is vague, I'm really not sure what you're referring to, it could be a number of things.

"you made vague false equivalences meant to try to portray Linux telemetry as being similar to Microsoft telemetry (even though you couldn't actually provide the technical details to back it up), meant to instill fear, uncertainty, and doubt in Linux by trying to associate Microsoft's brand of 'telemetry' with them"

I've done none of that and I explained why, my whole reason for posting here is to try to clarify the differences and clear up any fear or uncertainty. Please avoid taking this kind of combative attitude and assuming bad faith, we won't have a productive discussion. I don't really know how to put this any clearer. I am a Linux user trying to explain what is happening with Linux. I don't use any Microsoft products and I don't really care for them. If you're looking to accuse me of disparaging Linux to make it look bad then you're barking up the wrong tree, IMO what really makes Linux look bad is the constant infighting among its community members. I wish people would stop that.

1 comments

> I get what you're saying but this is one of those things that just doesn't work when it's opt-in.

So be it. We have had many operating systems without telemetry at all. If this is the will of users, they should respect it. Instead, you get two buttons: (1) give us everything, (2) give us the things we care about most. There is no third option "give us nothing" so people are downloading third party packages from various sources just to block that, possibly breaking parts of their system. And then MS changes things so it becomes an even worse mess. This is the very definition of being user-hostile - just because they can.

What is missing here is that no other method to collect feedback and product analytics has been proposed. It is impossible to make decisions at a company the size of Microsoft without that type of information. All the larger companies are doing it for this reason. Opt-out telemetry is the easiest and cheapest way to get it. Most Linux desktops don't have to deal with the problem because they aren't that big, and the operating systems that didn't have it at all were built for a different era. You're framing this as something being about the will of the users or being "user-hostile" vs not, but that's honestly not important here, this is a very real technical problem. Overwhelmingly it seems that Windows users (and some Linux users, definitely Android users if you count those as "Linux") are fine with the current state of things.

In some places it seems that people did care, for example the GDPR is a step in the right direction, but there seems to be about zero political will to do anything like that in the United States. And even that doesn't really change the state of telemetry in Windows that much.