[jorvi]

The problem with opt-in telemetry is that 95% of users don't change defaults, and the 5% who do are your power users. They're not representative of the average user. And only a subset of them will turn it on

Ironically enough the opposite happens with opt-out telemetry, for the same reason: a lot of power users will turn off telemetry, thus you will never see their usage patterns and will have to infer them. Dogfooding helps.

[crazygringo]

I'm confused.

You claim power users opt in to telemetry, and then immediately say power users opt out.

[jorvi]

A subset of power users want to their usage to be profiled (me, if I trust the company. Brave, Mozilla, Mullvad, 1Password, Bitwarden, Valve, companies like that). But most power users will not want that because of privacy worries.

From that you get two situations.

Opt-in:

- Regular users: click all 'ok' through setup at lightning speed, no telemetry enabled.

- Most power users: consciously don't check the box to opt-in because of privacy worries.

- Big picture power users: consciously check the opt-in box given they trust you (because they want their usage patterns to be profiled and optimized for).

Opt-out:

- Regular users: click all 'ok' through setup at lightning speed, telemetry enabled.

- Most power users: consciously check the box to opt-out because of privacy worries.

- Big picture power users: consciously don't check the opt-out box given they trust you (because they want their usage patterns to be profiled and optimized for).

[awwaiid]

power users opt in to opt in telemetry, and power users opt out of opt out telemetry. Power users click all the buttons.

[pnw_throwaway]

The problem with opt-in telemetry is that 95% of users are sick and tired of being spied on with every little thing they do.

[jorvi]

If they really were they would turn it off. And stop using Gmail and Android.

The overwhelming majority of people don't care about digital privacy because the cost is opaque to them.

Also, telemetry when done right isn't "spying". Again, it is anonymized and used to see, for example, where the hot paths and paper cuts in applications are.

[lukewarm707]

i think that in a free society, you should be able to sell the product you want to sell. but, you should give information of what you are selling to the customer.

if it has telemetry, then it is a tool the customer buys, that also has the function of listening and reporting to others, how it is being used.

you want to sell it - no problem. but tell the customer, "look, this is bugged, and it's going to tell me what you are doing. but it's a great product." anything with opt-out telemetry needs a big version of that warning on the top of the page.

personally i am not a buyer. but that's my preference.

[jorvi]

Again: telemetry isn't "spying" and it isn't "bugging" the application. It collects usage patterns: how often is which button being pressed by which type of user.

It is not collecting data on you personally nor is it collecting the actual data you enter.

[lukewarm707]

go on posthog: https://posthog.com/session-replay

"Watch people use your product" - that's their own words!

it literally sends you screen capture. and yes, you can id the user and capture inputs.

YC 2020. we love to see it.

[jorvi]

https://posthog.com/questions/how-to-hide-text-inputs

Of course the question remains if a company has "maskAllImages: true, maskAllTextInputs: true" (and I also wonder if they hide UI elements like message titles / contents), but that's why I mentioned I only turn on telemetry for companies that seem to explicitly, consistently and robustly care about privacy and security.

[hilariously]

And how would I know if you did it right or not?

[jorvi]

This is called trust.

[eddyg]

Telemetry (if it’s truly telemetry) is nowhere close to “tracking”. People conflate the two all the time. One can provide useful, anonymous metrics (e.g. “user enabled feature X”) without doing anything but incrementing the counter for “feature X”.

The “Firefox Problem” is that all the power users disable telemetry, so all the “cool” features that power users like (but never get used by “regular people”) get ignored or removed instead of improved because, according to the metrics, “nobody uses them”.

[hilariously]

The user doesn't conflate the two, the developers do, and that's why we turn off telemetry, because its damn close to tracking.

Knowing what (vulnerable) version of software a user is using transmitted in the clear was absolutely a part of the NSA monitoring error information from windows crash logs https://www.schneier.com/blog/archives/2017/08/nsa_collects_... - so forgive me if I do not trust the developer to know what makes me unsafe or not.

If you enable telemetry by default I will do my best to never use your product.

[dewey]

As you can see with TikTok / Instagram usage…regular people who are not on HN could not care less about that.

[jonhohle]

If Charmin put sensors in toilet paper rolls to optimize the wiping experience, it would be dystopian. Why do we give software a pass? Privacy is a right not a telemetry problem and opt-out by default is non-consensual surveillance.

[cyberrock]

In fairness Charmin is probably backed by millions of dollars of market research on simple user questions like softness, tendency to crumble, size, etc., while free software faces more criticism for issues that are exponentially more difficult to express.

[jonhohle]

Ok, replace Charmin with a toilet paper startup disrupting the industry. They wouldn’t be given a pass either. Still disgusting.

It should probably be noted that if there’s no agreement, collecting telemetry without opt-in probably violates several state and federal laws. Not that these are enforced, but it would be nice if they were.

[DonHopkins]

>Ok, replace Charmin with a toilet paper startup disrupting the industry.

"Move Fast and Break Things" is an ominous motto for a disruptive toilet paper startup.

So is "Fake It Till You Make It".

"Crowd Sourced Enshittification" is more like it.

[lukewarm707]

i think it's not so much non-consensual, it's misrepresentation.

it's bugged. the same as a mole in your company. or a sculpture with a listening device in it.

tell the user that your thing is bugged!