News for hackers. Stuff that matters.

A comment on Notes on privacy and data collection of Matrix.org. Parent comment

Re:Notes on privacy and data collection of Matrix.org by majewsky on Friday June 14, 2019 @05:13AM (#20181515)
> "Riot needs permission to access your address book contacts to find other Matrix users based on their email and phone numbers. Please allow access on the next pop-up to discover address book users reachable from Riot."

I know very well that concise wording in UIs is incredibly hard, but this wording is misleading. It makes it sound like Riot will not work unless I allow access to the address book. I'd suggest something like this:

> Riot can check your address book to find other Matrix users based on their email and phone numbers. If you agree to sharing your address book for this purpose, please allow access on the next pop-up.

[ Parent | on HN ]
Re:Notes on privacy and data collection of Matrix.org by Arathorn on Friday June 14, 2019 @05:26AM (#20181575)
Yeah, that's way better - thanks. have pushed the change at https://github.com/vector-im/riot-android/commit/786bf017852...
[ Parent | on HN ]
Re:Notes on privacy and data collection of Matrix.org by dharma1 on Friday June 14, 2019 @05:44AM (#20181665)
10 minutes from a hacker news comment to a github commit. Respect
[ Parent | on HN ]
Re:Notes on privacy and data collection of Matrix.org by masterfooo on Friday June 14, 2019 @03:52PM (#20186153)
That is just a text change, very superficial
[ Parent | on HN ]
Re:Notes on privacy and data collection of Matrix.org by meruru on Friday June 14, 2019 @02:23PM (#20185351)
Much much better. Thanks!
[ Parent | on HN ]
Re:Notes on privacy and data collection of Matrix.org by nfoz on Friday June 14, 2019 @10:49AM (#20183456)
I definitely agree that your wording change is a big improvement.

Why can't Riot "check my address book to find other Matrix users" without sharing it to their server? Could the client make a one-way hash for each contact and send those to the server to compare against hashes of other contacts?

So in your wording, it's not clear that B (agree to sharing my whole address book) follows from A (Riot wants to check my address book for a purpose). Actually it's not clear if "agree to sharing your address book" means sharing it with the client app, or sharing it with a remote server that someone else controls.

[ Parent | on HN ]