> when you read this comment you'll have loaded a page on HN. That means HN's server probably has a log of your IP address, browser agent string, etc.
Such logging isn't technically necessary to serve web pages, and ideally shouldn't be done without consent.
> Am I spying on you when I read those pages?
That's not spying, because the user consented to making their comments public. (Not sure about favorites though, there's a small note on the profile page but maybe the favoriting action should make it more explicit.)
> Google Analytics isn't spying on you when it tracks everything you do on 50% of the websites you visit.
It's spying if you didn't consent to it.
It's needed as soon as you want to do: non-trivial spam protection, context connection for errors/exceptions, dos mitigation, correlation of issues across browsers, and a few other things.
For most of those you could theoretically hash the IP because you're interested in matches not actual values (although matching either the AS or at least /24 makes things easier). But until we migrate to IPv6 hashing doesn't make sense (and once we move, keeping individual addresses doesn't make sense).
Basically the bigger the site, the more important that information is for operations.
Which devolves your argument into collecting this information is significantly more profitable. Which I think is generally accepted as true, but not nessisarily enough to make it acceptable.
In terms of hacking, building a secure site prevents this problem at the source. Banning specific IP’s in a world of proxies and public WiFi is almost useless.
Working on at /24 the level does everything else you mentioned.
There's no explicit consent but the fact you've told your computer to download some code and run it looks a lot like implied consent.
Its like knife can be used to kill people, lets get rid of knife instead.
Love the irony here :)
What harm does it cause ?
That actually sounds as a pretty straightforward, self-explanatory request. I don't see where the confusion arises.
Absolute statements are always wrong. ;)
The problem with this way of thinking is that it's very hard to define what 'spying' is, and what 'your life' is. This is best illustrated with an example - when you read this comment you'll have loaded a page on HN. That means HN's server probably has a log of your IP address, browser agent string, etc. There's a complete history of every article you've ever read, upvoted, commented on there for you (and the public at large for some things) to see;
Your profile: https://news.ycombinator.com/user?id=Altheasy
Your comments: https://news.ycombinator.com/threads?id=Altheasy
Your favourited articles: https://news.ycombinator.com/favorites?id=Altheasy
Taking the first page of your comments and that favourite I can reasonably assume that you're a developer, you don't like testing much, you have a cat, you have a judgemental attitude about how other people spend money, you have a smart phone, etc. Not great insights but you're pretty new here. If I trawled through the comments of someone who has 20,000 comments I could learn a lot.
So... is HN spying on you? Am I spying on you when I read those pages? I don't think so. You put that data out there in the open. The same is technically true for most data that people say is spying - eg Google Analytics isn't spying on you when it tracks everything you do on 50% of the websites you visit. You're giving that data away. That's fine. It's useful. It makes the internet better.
The flow of data in itself is OK. It only really becomes spying when the data is misused. That's what people want to control.