Live data from Hacker News

Transparent telemetry for open-source projects

research.swtch.com

231–240 of 314 posts

Re: Transparent telemetry for open-source projects

#231
post #209

Oh Google - never stop being you. Not only is it going to be opt-out (because of course it would be coming from Google), I really like the whole "wait a week before sending telemetry" part that just coincidentally has the benefit of sneaking right past people that actively look for suspicious network activity when they've freshly installed something. Am I being uncharitable?

Google is institutionally incapable of producing software that doesn't track its users over the internet. One example is the stock calculator app on Android, which according to their privacy statement may track your app interactions, device id, and email. Like what if users actually subtract more than they add or something. https://play.google.com/store/apps/datasafety?id=com.google.... Or the wallpapers they include…

As the saying goes, companies ship their org chart, and Google's is what, 90% ads?

Re: Transparent telemetry for open-source projects

#232
My new TV wouldn't work unless I agreed to it recoding and uploading those recordings to it's servers which may be temporary stored while they are transcribing the audio to text for more permanent storage.

My TV is forcing me into a employment agreement where I generated data to train their models or otherwise 'improve service'.

Data is so valuable companies are risking a huge PR backlash. Data collection is the business model and I assume the same ethos will make its away into open source.

Re: Transparent telemetry for open-source projects

#233

Earlier quoted context omitted.

> The idea of telemetry is being able to prioritize the work that will be most widely useful. It does sort of hinge on the highly suspect assumption that usefulness is correlated with use. An obvious counter-example to this is something like a fire-extinguisher, which will in the ideal case just sit on a wall until it's use-by date passes and then it's discarded having never been used; or on the flip side, an incredi…

All this boils down to "an unskilled engineer will misinterpret data even if they have it". I'll assume the Go team knows what they're doing, based on their track record so far. There's a lot of very simple questions you can answer very reliably, too, like "what proportion of the users are still using a certain compatibility flag".

Go is actually well known for dubious choices they reverted later, like not using libc, their weird major version scheme, or the absence of generics. There's a good record of charging ahead against the popular wisdom and being proven wrong.

Re: Transparent telemetry for open-source projects

#234

There's a lot of confusion in these comments about opt-out vs opt-in. The debate isn't settled, but a lot of the issues raised here have been addressed. Reposting Russ' comment: >Longer answer about opt-out generally, copied from mail I sent to golang-dev. > I wrote a little about this at https://research.swtch.com/telemetry-design#opt-out . Just to quote the beginning: “An explicit goal of this design is to build a…

> The debate isn't settled, but a lot of the issues raised here have been addressed.

That's not addressing the issue as much as dismissing it.

Re: Transparent telemetry for open-source projects

#235
post #104

Probably related to[0]. To anybody complaining that this should be opt-in: opt-in telemetry doesn't work. The reason for this is that most people don't care, but they don't care either way. They don't disable it when prompted, nor would they enable it manually. The idea of telemetry is being able to prioritize the work that will be most widely useful. For this you need a good and balanced sample of your users. You do…

Any evidence that telemetry actually works? (i.e makes the program better)

Yes, the simplest example is crashes being reported.

Developers can see that a specific crash is being hit by 1% of their userbase and then check the logs to see what went wrong and where the cash happened. The fix is made the program is indeed better.

Re: Transparent telemetry for open-source projects

#236
While this articles point out all the right explanation on why telemetry is needed and how it can be made little more transparent by Go toolchain acting as intermediary and publishing the telemetry data publicly, it fails to point out the disadvantages/risks of such system. At the core, the issue is about trust and the user not having any incentive.

Re: Transparent telemetry for open-source projects

#237
post #80

Oh Google - never stop being you. Not only is it going to be opt-out (because of course it would be coming from Google), I really like the whole "wait a week before sending telemetry" part that just coincidentally has the benefit of sneaking right past people that actively look for suspicious network activity when they've freshly installed something. Am I being uncharitable?

Very popular programming language and IDE have telemetry on by default, VSCode, C#, Java etc ... People act like they discover telemetry in 2023. I don't think it's a big deal, ultimately it's to improve Go and the proposal makes it very easy to disable it ( single env variable ).

> VSCode, C#

These are both Microsoft products. Microsoft's position is well known.

> Java etc ...

Really? Which Java distribution?

It's definitely opt-in in Jetbrains IDEs.

Re: Transparent telemetry for open-source projects

#238
post #23

I've been a pretty strong advocate of the idea that analytics should always be minimal, 100% anonymous, aggregated, and open to the public - otherwise it’s spying. This is how we do analytics on our websites today[0][1], and how we plan to do it in games we release in the future. Maybe one day I will start a dedicated FOSS service that people can use for exactly this with some trusted reputation/transparency/auditabi…

Checking out Mach and seeing it's written in Zig. Bit surprised to see it being "used in anger" given that Zig is currently at 0.10.1. Can you share how your experience with the language has been so far? Thanks.

Re: Transparent telemetry for open-source projects

#239

Earlier quoted context omitted.

The features that are like fire extinguishers are the ones most likely to be unjustly removed with the rationale of looking at telemetry. See for example Mozilla's bizarre decision to remove the ability to change the override the character encoding of a webpage with some half-baked detector.

We cant solve this problem by carving out our eyes. We must adapt to having data about the world.

Nobody wants you to carve out your eyes. They want you to stop shoving eyes into everything you touch.

Meanwhile, I'll decide what I must or must not adapt to, thank you.

Re: Transparent telemetry for open-source projects

#240
post #199
post #190

Earlier quoted context omitted.

From my reading focused on this specific issue of the GDPR and the national laws of member states, this is not the case. Opt-in is specifically required for personal information. The telemetry data outlined in the proposal would not fall under this requirement. You can even retain time-limited IP logs with some special caveats. The GDPR is actually quite reasonable and fair. Russ Cox is a very intelligent and effecti…

Google or Russ Cox's reputation is irrelevant. The idea stands alone. I'm merely crediting him with the idea. I read the proposal. There is no discussion of the legality of this at all. I'd expect anyone with any level of supposed technical competence to consider this in relation to global data protection. I suspect there has been no legal review as mentioned in the thread because I know how slow the lawyers in this…

Can you articulate how this telemetry collection would violate the GDPR explicitly?
Post reply on HN