News for hackers. Stuff that matters.

A comment on Console Do Not Track – Proposal for a standard environment variable. Parent comment

Re:Console Do Not Track – Proposal for a standard environmen... by TeMPOraL on Tuesday July 06, 2021 @12:24PM (#27750647)
> How do users know if that's all the data that's submitted?

That's the thing, isn't it? They'll never know. They can't; it takes deep technical knowledge to even be able of conceptualize what data could be sent, and how it could be potentially misused.

Which is to say, it's all a matter of trust. Shipping software with opt-out telemetry (or one you can't disable) isn't a good way to earn that trust.

[ Parent | on HN ]
Re:Console Do Not Track – Proposal for a standard environmen... by infogulch on Tuesday July 06, 2021 @01:49PM (#27751934)
Even with deep technical knowledge and severely pared down telemetry, PII embedded in side-channel like outlets could be missed. Think a simple stack trace with no data is PII-free? Probably. But are you sure that the stack of functions called doesn't depend on the bytes in your name?
[ Parent | on HN ]