From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id 8J4ZIA6cn2DfWAEAgWs5BA (envelope-from ) for ; Sat, 15 May 2021 12:01:50 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id gMmpGw6cn2A9LQAAbx9fmQ (envelope-from ) for ; Sat, 15 May 2021 10:01:50 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 2931623160 for ; Sat, 15 May 2021 12:01:45 +0200 (CEST) Received: from localhost ([::1]:46884 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lhr79-0005DO-KX for larch@yhetil.org; Sat, 15 May 2021 06:01:43 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33450) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lhr6p-0005DF-Ix for guix-devel@gnu.org; Sat, 15 May 2021 06:01:23 -0400 Received: from imta-36.everyone.net ([216.200.145.36]:48102 helo=imta-38.everyone.net) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lhr6n-0004k5-Ey for guix-devel@gnu.org; Sat, 15 May 2021 06:01:23 -0400 Received: from pps.filterd (omta002.sj2.proofpoint.com [127.0.0.1]) by imta-38.everyone.net (8.16.0.43/8.16.0.43) with SMTP id 14F9rJ9P000395; Sat, 15 May 2021 03:01:15 -0700 X-Eon-Originating-Account: lx1-UNE7JYxNvdZZb2Z5qQtbSChoBR3Sz_6Hd3ss7UY X-Eon-Dm: m0116293.ppops.net Received: by m0116293.mta.everyone.net (EON-AUTHRELAY2 - 53b92446) id m0116293.60622039.451beb; Sat, 15 May 2021 03:01:14 -0700 X-Eon-Sig: AQMHrIJgn5vq0tsm3QIAAAAD,5ddb42288f517378b4fc2496d4991688 X-Eip: 5RkHI8d2W2KHxjNbCwJW-qL5K9eYClsd_ES4Q__eMAs Date: Sat, 15 May 2021 12:01:05 +0200 From: Bengt Richter To: Leo Famulari Subject: Re: Free software telemetry and the Guix System Message-ID: <20210515100105.GA5410@LionPure> References: <875yzme70r.fsf@disroot.org> <87sg2pjib3.fsf@netris.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) X-Proofpoint-ORIG-GUID: OusJxd3NWI1NGbxhT5pJJGNaAWjThd7F X-Proofpoint-GUID: OusJxd3NWI1NGbxhT5pJJGNaAWjThd7F X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.391, 18.0.761 definitions=2021-05-15_06:2021-05-12, 2021-05-15 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 impostorscore=0 spamscore=0 priorityscore=1501 malwarescore=0 clxscore=1034 mlxscore=0 phishscore=0 mlxlogscore=466 suspectscore=0 lowpriorityscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2104190000 definitions=main-2105150069 Received-SPF: pass client-ip=216.200.145.36; envelope-from=bokr@oz.net; helo=imta-38.everyone.net X-Spam_score_int: -15 X-Spam_score: -1.6 X-Spam_bar: - X-Spam_report: (-1.6 / 5.0 requ) BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.248, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Bengt Richter Cc: "guix-devel@gnu.org" Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1621072905; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post; bh=sshMjMh6TWleTfVdBpMMK9YmfMFtqvx8eCA3ugHHJtw=; b=mwYmaq4KIDcoUHqjMtsu28B5yrZZ1ppI58QnIs+7ohshcGZYWfx+VKIWYRdMwM8I9uLVSc jgXXdrGIp+zr5+RZQeS5Dh4uTyUdJcPbvDXUgWFN7PHSnoo0axVxPa879hODtoSo8jntU0 9beiD4Xylb7nplZCB0zVxaVIxHNGcen2H1/TcxrMXe6QtxA4n6EWl5E7jpIUB2c/Zq81M2 XBKwO1zMWN9b3zEc6MPHabM+rJYhv/+e+DnBL60oCbXHdqvqyJFyovb7C8l2+0VY3HTOPd sLjZDeRrkebtY8Z19Ytr6yoRrzXLJOkuBQ+Q7ZWeaALnefQI7VA1cuZ91UH0UQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1621072905; a=rsa-sha256; cv=none; b=Vj2RoUcqphH98jS1oFrsDt7PiepUx9NQa1zHp41b2aXIKuOIZKaS9L13WlhHRw3PF6N0tO xMogRD50PGkUXjIPIdt8YMcY9GO7wtEGBVfNAVd+fJJHvmJnwvUhNcSg2MhpBdS9RwskvL I7QvyxA9upFELCde34LTVT14tpptSKuVYe67p7kQFfL4z9i5G86XCxY1tIMxTzw8zoNppj b9xWIbKkvzq7URqg0XyhJuvOdZMWo9S1nXPNj+dfODHKtrYJ0TCb/hBxP9NJ1UceBPwmCL lNjdjxDBqP+5AJSKvmrJIkHYU1knOjqIVzYknbK+KAG6ifhILlAiZod7kiP03Q== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -1.35 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 2931623160 X-Spam-Score: -1.35 X-Migadu-Scanner: scn0.migadu.com X-TUID: wd+7HdQ0yHzW Hi all, On +2021-05-14 16:52:25 -0400, Leo Famulari wrote: > On Fri, May 14, 2021 at 06:55:34PM +0000, Cook, Malcolm wrote: > > > If these claims are true, then I think this is quite satisfactory for > > > our purposes. I wouldn't even object to enabling the telemetry code via > > > the CMake build-time option, as long as it's "opt-in", i.e. that each > > > user must explicitly enable it, and only after being made aware of the > > > consequences of doing so. > > > > > > What do you think? > > > > My 2 cents: I think the Audacity model is exemplary and your interpretation is spot on. I personally want the option of enabling such telemetry, as it may well serve my needs and may also give the developer valuable usage and/or crash info which is the least I can provide in return for such a great FOSS app as Audacity. > > +1 > My 2 cents: :) I like options, but I would feel more secure if it were implemented in a separate, dynamically linked when opted-in, some-implementation.so which I could get the kernel to prevent access to, e.g. by # chmod 400 some-implementation.so -- Regards, Bengt Richter