4 ms·
>> We both know no one opts in to stuff. > That should tell you something, then. Yeah. People are lazy. Humanity has known that for thousands of years. > Eve
by jonathankoren 4y ago
>> We both know no one opts in to stuff.
> That should tell you something, then.
Yeah. People are lazy. Humanity has known that for thousands of years.
> Even IP address, even if never stored, is too much telemetry to be collected without consent or other lawful basis, which doesn't seem to be present.
Go home dude. You clearly have no idea how the internet works.
- closewith 4y ago> Yeah. People are lazy. Humanity has known that for thousands of years. What a disgusting attitude to hold. It should tell you that usera don't want to share telemetry and that decision should be respected. I'm very thankful I live in a jurisdiction that protects me and the public from people like you. > Go home dude. You clearly have no idea how the internet works. It's clear you don't understand the regulatory environment that browsers operate in. Hopefully you are not representative of the developers in Mozilla. Otherwise, it's time to jump ship to Librewolf or another privacy-conscious fork.
- jonathankoren 4y ago> I'm very thankful I live in a jurisdiction that protects me and the public from people like you. If you think your local regulatory environment prevents anything you're upset about, you need to learn about your regulations, because everything I've said is completely GDPR compliant, Which as far as I know, is the strictest law about data collection out there. All the GDPR says is that you setup data retention controller (a person responsible for data retention and limit access of personally identifiable information. If you can articulate a "legitimate interest", and take steps mitigate access (which can include access control lists, data anonymization, data aggregation, and/or data retention policies), then you're fine. If the data is does not have PII, it literally doesn't matter. I say this as someone that has conducted multiple GDPR compliance audits, at multiple companies. So to use your telemetry example. While your IP address is PII, and it would be recorded in an access log (along with all requests) up to n days, before being purged, your software information and stack trace information could be stored indefinitely because there is no way to link a stack trace to literally anyone. > It's clear you don't understand the regulatory environment that browsers operate in. I already addressed that, but more importantly, I know that you can't get a response from any machine using Internet Protocol without sending your IP address, because it must be provided so the so the response can be sent to back to you. This means that your IP address will always be as you put it "collected" even if it is "not stored" -- even in an http access log (Which, by the way is a legitimate interest for security and debugging reasons.) You can't articulate an hypothetical threat to an individual from nonPII information, nor explain how anonymization is insufficient protection, nor do you understand the legal or technical requirements involved. And to cap it off, if you've actually looked at Librewolf. You'd know it makes request to Mozilla all the time (with your IP address! Without your explicit approval! By default!) to download tracking protection data. In fact, Librewolf strongly recommends leaving this on as it increases security and privacy. That is why I dismiss you.
- deleted 4y ago[deleted]