On Mar 26, 2009, at 9:15 AM, Denis Gervalle wrote:

> Hi Vincent,
>
> On 25 mars 09, at 16:08, Vincent Massol wrote:
>
>> Just to be sure, the GUID would not allow to link any data back to  
>> you
>> of course, it's just an id that is the same across pings. We should
>> make sure of that. Then the idea is not to send any data at all, only
>> to know that a given instance is alive (for that we need to know that
>> 2 pings are coming from the same XE install).
>
> Yes, I have understand that but even without personal information,
> generating unique ID could be considered spyware. Do you remember the
> reaction when Intel has introduce a GUID in their processor ?
> Probably many people will not care and never noticed, but do you want
> to take the risk that one be shocked and start an internet compain
> saying you are developing spyware ?
> For myself, I would not, and I feel that privacy is a growing concern
> these days.
>
>> The problem is that adding a screen with disclaimer/etc is more
>> complex and would require more time. We would actually need the
>> installation wizard which is not there yet. I think it's a good idea
>> to do so but in this case, as you say we would probably gather more
>> data. Right now the need is very simple: just to know how many XE
>> installs are active.
>
> As I have said, ensuring that some page trigger a RSS request to your
> site will probably not raise the same issue, and collecting data from
> web server logs is commonly accepted. I feel that with some clever
> algorithm, you may be able to derive some significant information. I
> hopefully, we can imagine that the wizard will be ready when more
> precise statistics will be needed.
>
>> The GUI could be a random number generated once and stored in the
>> database.
>
> This precisely what I dislike in this idea.
>
>> Do you consider that to be spying if there's no way to link that
>> simple information to you?
>
> Definitely, yes this is spyware practice. It is exactly the same as
> leaving a cookie.

ok I understand. Thanks for your feedback. That was why I posted this  
(to ensure there was no problem and I'm glad you caught it since there  
is a problem :)).

As ludovic said he'll try to think about other ways to find active  
installs (it was his idea initially that I was trying to implement).

Thanks again
-Vincent

_______________________________________________
devs mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/devs

Reply via email to