4 ms·

Please make it opt in. If you truly believe people closely read the prompts for having their data harvested, a default to "No" should not impact you at all. If

by hueving 10y ago

Please make it opt in. If you truly believe people closely read the prompts for having their data harvested, a default to "No" should not impact you at all. If you don't believe they read the prompts closely, you're an asshole for stealing data by default.

andybak 10y ago
'Stealing' data? Is that like 'stealing' by downloading a movie?
- TeMPOraL 10y ago
  "Exfiltrating" would be a better word here. (Also, downloading a movie is a different thing - there you're not stealing nor exfiltrating anything, you're downloading data as intended by uploader, who may or may not have the copyrights for that data.) (INB4, ripping a DVD and uploading it is not data theft. Exfiltrating a pre-release copy from movie company's servers would be data theft.)
  - rocqua 10y ago
    The ripping would be the 'exfiltration' as would recording a movie in theatre or hacking servers. The sharing or getting something from a shared thing would merely be copyright infringement.
- wheelerwj 10y ago
  No, it's like stealing personally identifying information and sending it to the world's largest ad company.
  - deleted 10y ago
    [deleted]
  - daenney 10y ago
    The information brew collects I would hardly call personally identifiable. Take a look at what they collect: https://github.com/Homebrew/brew/blob/master/docs/Analytics.md https://github.com/Homebrew/brew/blob/master/docs/Analytics....
    - jakobegger 10y ago
      They can call it "anonymous data" as much as they want, but in the end it's still data transmitted to Google's servers. If you are simultaneously logged into your Google account on that computer, the information is not anonymous anymore. Google could with high probability correlate connections.
      - daenney 10y ago
        Sure, but then the problem isn't the information they collect but the fact that it goes to Google. Short from them setting up their own analytics service though, to whichever one you send this data it'll be traceable up to some extent. Google just might have a larger trove of data about you, but that's also through your own doing.
      - andybak 10y ago
        > They can call it "anonymous data" as much as they want, but in the end it's still data transmitted to Google's servers. You appear to be saying that it's wrong to send any data to Google - which strikes me as an indefensibly extreme position. For example if they were tracking a simple count "number of times anyone anywhere has run brew" and it was stored as a single global integer then it's hard to imagine what issue you could have with it as it's basically no worse than a simple hit counter on a website. So what are you saying? Surely the problem has to relate to what data is collected?
        jakobegger 10y ago
        I'm saying that if you make your software talk to Google, don't say that it collects "anonymous aggregate data". The data it sends could easily be traced back to you (by Google). And after all the Snowden revelations it's very naive to assume that Google (or any other company) will protect your data.
- hueving 10y ago
  By your definition, there would be no such thing as stealing IP, PII, launch codes or identities. However, those things are well accepted terms in all industries, including tech. You need to reconsider your strange restriction to mutual exclusion if you ever want to engage in meaningful conversations.
  - andybak 10y ago
    > stealing IP This is the usage I'm most firmly resisting. > PII, launch codes or identities All inaccurate to varying degrees - or at the very least metaphorical/rhetorical uses. If you're allowed to push a meaning in one direction then I'm allowed to point it out and attempt to bend it back a little.
    - hueving 10y ago
      >push a meaning in one direction then I'm allowed to point it out and attempt to bend it back a little. I'm not pushing anything. Your argument is about whether or not copying information is 'stealing'. I'm just pointing out that it's a very commonly agreed upon vernacular all over many industries. Call your credit card company and tell them someone stole your credit card number and see if they understand what you are talking about and/or try to correct you by saying it was merely copied. Go ahead and try to change the definition, but don't waste time on HN with that crap when the subject isn't even about whether or not it's "stealing" because it makes for boring conversation.
      - andybak 10y ago
        You don't see anything even slightly problematic about referring to opt-out (rather than opt-in) aggregate and presumably anonymous usage statistics as 'stealing'? You don't think that is possibly somewhere towards the further reaches of consensus on what is a reasonable application of the word? You're welcome to disagree with my position but you're going a touch further than that. You're also accusing me of arguing in bad faith and being somehow aware that my argument has no merits. Considering I think I'm stating a fairly reasonable view I find that somewhat disingenuous in return.
true_religion 10y ago
Calling it theft feels a bit hyperbolic.
- tn6o 10y ago
  Agreed.
iagooar 10y ago
This. A thousand times this. To me this whole thing feels like the maintainer is trying to justify something that most people won't ever accept as the status quo. Bad times when software this solid is going in a wrong direction. Time for a Homebrew fork?
- CJefferson 10y ago
  No need for a fork, if someone was willing to put in the time and money to maintain a private anonymous analytics server, the homebrew folks would be happy to use it. Unless of course you are fundamentally opposed to tracking of any kind, then a fork is required. It is a fairly massive infrastructure to recreate however...
CJefferson 10y ago
Is it "stealing data" to record that certain options in my program are never used, or used frequently, or whenever a user clicks on options A,B and C in sequence the app crashes? My problem is that I believe that 90% of the users of my app won't care one way or the other if I record these stats. If I default opt-out these people, then I lose all that useful data and in the process, I believe, make my app worse for everyone. I won't deny this is not an obvious choice, but I think personally on balance it's better to opt-in. Especially when the data is anonymised and doesn't contain any private/identifying information. But I understand how others would disagree. If there was some kind of OS-wide "don't record what I do" option I could hook into, I would use it.
- lorenzfx 10y ago
  How about choosing no default, and instead ask the user on first run? `Do you want to send usage data to the developer? (yes/no)`
  - CJefferson 10y ago
    I imagine it would get REALLY annoying if every command line program started doing that, every time you logged into a new machine. Of course, that suggests we should introduce some kind of standard, then bash (or whatever shell you use) could prompt you once, and every other program could use that setting.
    - jeena 10y ago
      At least this would make the problem with how many commandline tools are tracking you visible, and perhaps would start a discussion on the necessity of tracking for tools like brew, ls, cp, dd and so on.
- Nursie 10y ago
  Your belief may not match the real world. You can only know that by actually asking them. Look at the outcry when Microsoft put this stuff in Win 10. At the very least you should present a question on install. Hiding a notice amongst licenses and other information, as often happens, is underhanded and scammy.
Esau 10y ago
This is the correct answer. Opt-out is a jerk move - used by those who value themselves more than their users/customers/fellow humans.

by hueving 10y ago

andybak 10y ago

'Stealing' data? Is that like 'stealing' by downloading a movie?

TeMPOraL 10y ago
"Exfiltrating" would be a better word here. (Also, downloading a movie is a different thing - there you're not stealing nor exfiltrating anything, you're downloading data as intended by uploader, who may or may not have the copyrights for that data.) (INB4, ripping a DVD and uploading it is not data theft. Exfiltrating a pre-release copy from movie company's servers would be data theft.)
- rocqua 10y ago
  The ripping would be the 'exfiltration' as would recording a movie in theatre or hacking servers. The sharing or getting something from a shared thing would merely be copyright infringement.
wheelerwj 10y ago
No, it's like stealing personally identifying information and sending it to the world's largest ad company.
- deleted 10y ago
  [deleted]
- daenney 10y ago
  The information brew collects I would hardly call personally identifiable. Take a look at what they collect: https://github.com/Homebrew/brew/blob/master/docs/Analytics.md https://github.com/Homebrew/brew/blob/master/docs/Analytics....
  - jakobegger 10y ago
    They can call it "anonymous data" as much as they want, but in the end it's still data transmitted to Google's servers. If you are simultaneously logged into your Google account on that computer, the information is not anonymous anymore. Google could with high probability correlate connections.
    - daenney 10y ago
      Sure, but then the problem isn't the information they collect but the fact that it goes to Google. Short from them setting up their own analytics service though, to whichever one you send this data it'll be traceable up to some extent. Google just might have a larger trove of data about you, but that's also through your own doing.
    - andybak 10y ago
      > They can call it "anonymous data" as much as they want, but in the end it's still data transmitted to Google's servers. You appear to be saying that it's wrong to send any data to Google - which strikes me as an indefensibly extreme position. For example if they were tracking a simple count "number of times anyone anywhere has run brew" and it was stored as a single global integer then it's hard to imagine what issue you could have with it as it's basically no worse than a simple hit counter on a website. So what are you saying? Surely the problem has to relate to what data is collected?
      - jakobegger 10y ago
        I'm saying that if you make your software talk to Google, don't say that it collects "anonymous aggregate data". The data it sends could easily be traced back to you (by Google). And after all the Snowden revelations it's very naive to assume that Google (or any other company) will protect your data.
hueving 10y ago
By your definition, there would be no such thing as stealing IP, PII, launch codes or identities. However, those things are well accepted terms in all industries, including tech. You need to reconsider your strange restriction to mutual exclusion if you ever want to engage in meaningful conversations.
- andybak 10y ago
  > stealing IP This is the usage I'm most firmly resisting. > PII, launch codes or identities All inaccurate to varying degrees - or at the very least metaphorical/rhetorical uses. If you're allowed to push a meaning in one direction then I'm allowed to point it out and attempt to bend it back a little.
  - hueving 10y ago
    >push a meaning in one direction then I'm allowed to point it out and attempt to bend it back a little. I'm not pushing anything. Your argument is about whether or not copying information is 'stealing'. I'm just pointing out that it's a very commonly agreed upon vernacular all over many industries. Call your credit card company and tell them someone stole your credit card number and see if they understand what you are talking about and/or try to correct you by saying it was merely copied. Go ahead and try to change the definition, but don't waste time on HN with that crap when the subject isn't even about whether or not it's "stealing" because it makes for boring conversation.
    - andybak 10y ago
      You don't see anything even slightly problematic about referring to opt-out (rather than opt-in) aggregate and presumably anonymous usage statistics as 'stealing'? You don't think that is possibly somewhere towards the further reaches of consensus on what is a reasonable application of the word? You're welcome to disagree with my position but you're going a touch further than that. You're also accusing me of arguing in bad faith and being somehow aware that my argument has no merits. Considering I think I'm stating a fairly reasonable view I find that somewhat disingenuous in return.

true_religion 10y ago

Calling it theft feels a bit hyperbolic.

tn6o 10y ago
Agreed.

iagooar 10y ago

This. A thousand times this. To me this whole thing feels like the maintainer is trying to justify something that most people won't ever accept as the status quo. Bad times when software this solid is going in a wrong direction. Time for a Homebrew fork?

CJefferson 10y ago
No need for a fork, if someone was willing to put in the time and money to maintain a private anonymous analytics server, the homebrew folks would be happy to use it. Unless of course you are fundamentally opposed to tracking of any kind, then a fork is required. It is a fairly massive infrastructure to recreate however...

CJefferson 10y ago

Is it "stealing data" to record that certain options in my program are never used, or used frequently, or whenever a user clicks on options A,B and C in sequence the app crashes? My problem is that I believe that 90% of the users of my app won't care one way or the other if I record these stats. If I default opt-out these people, then I lose all that useful data and in the process, I believe, make my app worse for everyone. I won't deny this is not an obvious choice, but I think personally on balance it's better to opt-in. Especially when the data is anonymised and doesn't contain any private/identifying information. But I understand how others would disagree. If there was some kind of OS-wide "don't record what I do" option I could hook into, I would use it.

lorenzfx 10y ago
How about choosing no default, and instead ask the user on first run? `Do you want to send usage data to the developer? (yes/no)`
- CJefferson 10y ago
  I imagine it would get REALLY annoying if every command line program started doing that, every time you logged into a new machine. Of course, that suggests we should introduce some kind of standard, then bash (or whatever shell you use) could prompt you once, and every other program could use that setting.
  - jeena 10y ago
    At least this would make the problem with how many commandline tools are tracking you visible, and perhaps would start a discussion on the necessity of tracking for tools like brew, ls, cp, dd and so on.
Nursie 10y ago
Your belief may not match the real world. You can only know that by actually asking them. Look at the outcry when Microsoft put this stuff in Win 10. At the very least you should present a question on install. Hiding a notice amongst licenses and other information, as often happens, is underhanded and scammy.

Esau 10y ago

This is the correct answer. Opt-out is a jerk move - used by those who value themselves more than their users/customers/fellow humans.