3 ms·

Do you consider even automatic crash reports as a spyware? (Asssuming they are properly anonymized)

by Xeamek 3y ago

qwezxcrty 3y ago
I consider that is. Unless as most software used to do, show a popup to politely ask me, can it report the crash to vendor.
- yjftsjthsd-h 3y ago
  It should ask and show what it wants to send so the user can give informed consent.
pjc50 3y ago
It's very hard to anonymize a crash report if it's more than just a backtrace. If it contains any user data - which might be relevant and useful to debugging! - it's not anonymous. Edit: wondering if the correct approach is actually a GDPR one ...
harry8 3y ago
As per mrob's ammendment. Opt in. Every single time. No exceptions.
mcpackieh 3y ago
Automatic? Absolutely. "Proper anonymization" is a joke, supposedly anonymized datasets are shown to reveal PII all the time. Informed user consent is paramount, and if informed consent isn't possible because the nature of the report is too technical for the users then the report shouldn't be sent. Even if some rare few developers can properly anonymize data and for instance, scrub core dumps of any user data, them doing so normalizes the practice of opt-out telemetry and most other developers won't be so careful.
- charcircuit 3y ago
  The crash reports are only looked at by automated systems and by Microsoft developers who can only temporarily keep them on their machines. Microsoft is interested in improving software and not violating people's privacy.
  - pacifika 3y ago
    Microsoft developers might be interested in improving software, but Microsoft the business is interested in partnerships and making money off people using Windows.
throwbadubadu 3y ago
Without consent? Definitely.
Xelbair 3y ago
Yes, as they can expose sensitive data. Doubly so if user isn't informed about that.
johnnyworker 3y ago
What is the pipeline from a random application crashing, 99% of the time because of misconfiguration or a bug in the application, to Microsoft doing anything that fixes that? How could they even?

Do you consider even automatic crash reports as a spyware? (Asssuming they are properly anonymized)

by Xeamek 3y ago

Do you consider even automatic crash reports as a spyware? (Asssuming they are properly anonymized)

I consider that is. Unless as most software used to do, show a popup to politely ask me, can it report the crash to vendor.

yjftsjthsd-h 3y ago
It should ask and show what it wants to send so the user can give informed consent.

pjc50 3y ago

It's very hard to anonymize a crash report if it's more than just a backtrace. If it contains any user data - which might be relevant and useful to debugging! - it's not anonymous. Edit: wondering if the correct approach is actually a GDPR one ...

harry8 3y ago

As per mrob's ammendment. Opt in. Every single time. No exceptions.

mcpackieh 3y ago

Automatic? Absolutely. "Proper anonymization" is a joke, supposedly anonymized datasets are shown to reveal PII all the time. Informed user consent is paramount, and if informed consent isn't possible because the nature of the report is too technical for the users then the report shouldn't be sent. Even if some rare few developers can properly anonymize data and for instance, scrub core dumps of any user data, them doing so normalizes the practice of opt-out telemetry and most other developers won't be so careful.

charcircuit 3y ago
The crash reports are only looked at by automated systems and by Microsoft developers who can only temporarily keep them on their machines. Microsoft is interested in improving software and not violating people's privacy.
- pacifika 3y ago
  Microsoft developers might be interested in improving software, but Microsoft the business is interested in partnerships and making money off people using Windows.

throwbadubadu 3y ago

Without consent? Definitely.

Xelbair 3y ago

Yes, as they can expose sensitive data. Doubly so if user isn't informed about that.

johnnyworker 3y ago

What is the pipeline from a random application crashing, 99% of the time because of misconfiguration or a bug in the application, to Microsoft doing anything that fixes that? How could they even?