4 ms·
> I'm very thankful I live in a jurisdiction that protects me and the public from people like you. If you think your local regulatory environment prevents any
by jonathankoren 4y ago
> I'm very thankful I live in a jurisdiction that protects me and the public from people like you.
If you think your local regulatory environment prevents anything you're upset about, you need to learn about your regulations, because everything I've said is completely GDPR compliant, Which as far as I know, is the strictest law about data collection out there.
All the GDPR says is that you setup data retention controller (a person responsible for data retention and limit access of personally identifiable information. If you can articulate a "legitimate interest", and take steps mitigate access (which can include access control lists, data anonymization, data aggregation, and/or data retention policies), then you're fine. If the data is does not have PII, it literally doesn't matter. I say this as someone that has conducted multiple GDPR compliance audits, at multiple companies.
So to use your telemetry example. While your IP address is PII, and it would be recorded in an access log (along with all requests) up to n days, before being purged, your software information and stack trace information could be stored indefinitely because there is no way to link a stack trace to literally anyone.
> It's clear you don't understand the regulatory environment that browsers operate in.
I already addressed that, but more importantly, I know that you can't get a response from any machine using Internet Protocol without sending your IP address, because it must be provided so the so the response can be sent to back to you. This means that your IP address will always be as you put it "collected" even if it is "not stored" -- even in an http access log (Which, by the way is a legitimate interest for security and debugging reasons.)
You can't articulate an hypothetical threat to an individual from nonPII information, nor explain how anonymization is insufficient protection, nor do you understand the legal or technical requirements involved.
And to cap it off, if you've actually looked at Librewolf. You'd know it makes request to Mozilla all the time (with your IP address! Without your explicit approval! By default!) to download tracking protection data. In fact, Librewolf strongly recommends leaving this on as it increases security and privacy.
That is why I dismiss you.
- deleted 4y ago[deleted]