zlacker

[parent] [thread] 21 comments
1. bayind+(OP)[view] [source] 2025-07-27 20:53:34
Anonymized or not, opt-out telemetry is plain spying. Go was about to find out, and they backed out the last millisecond and converted to opt-in, for example.
replies(1): >>nicce+z3
2. nicce+z3[view] [source] 2025-07-27 21:23:28
>>bayind+(OP)
Unfortunately opt-in telemetry is like no telemetry at all. Defaults matter.
replies(3): >>inetkn+T3 >>mnw21c+74 >>bayind+ZP
◧◩
3. inetkn+T3[view] [source] [discussion] 2025-07-27 21:26:27
>>nicce+z3
No telemetry at all is a good thing to some (most?) people.
replies(1): >>nicce+l5
◧◩
4. mnw21c+74[view] [source] [discussion] 2025-07-27 21:27:28
>>nicce+z3
Surely that should be fortunately.
◧◩◪
5. nicce+l5[view] [source] [discussion] 2025-07-27 21:37:15
>>inetkn+T3
Telemetry can be implemented well. The software you use gets bugs fixed much faster since you get statistics that some bugs have higher impact than others. The more users software has, less skills they have in average to accurately report any issues.
replies(1): >>inetkn+Y5
◧◩◪◨
6. inetkn+Y5[view] [source] [discussion] 2025-07-27 21:41:53
>>nicce+l5
> The software you use gets bugs fixed much faster since you get statistics that some bugs have higher impact than others.

Try talking to your users instead.

> The more users software has, less skills they have in average to accurately report any issues.

No amount of telemetry will solve that.

replies(1): >>jodrel+Rs
◧◩◪◨⬒
7. jodrel+Rs[view] [source] [discussion] 2025-07-28 01:37:07
>>inetkn+Y5
The PowerShell team at Microsoft added opt-out telemetry to track when it was launched so they could make the case internally that they should get more funding, and have more internal clout.

It’s easy to argue that if you are a PowerShell user or developer you benefit from no telemetry, but it’s hard to argue that you benefit from the tool you use being sidelined or defunded because corporate thinks nobody uses it. “Talk to your users” doesn’t solve this because there are millions of computers running scripts and no way to know who they are or contact them even if you could contact that many people, and they would not remember how often they launched it.

https://learn.microsoft.com/en-us/powershell/module/microsof...

replies(3): >>Eisens+Hw >>inetkn+vH >>bayind+BQ
◧◩◪◨⬒⬓
8. Eisens+Hw[view] [source] [discussion] 2025-07-28 02:24:59
>>jodrel+Rs
To take that logic to its extreme: I'm sure we could have amazing medical breakthroughs if we just gave up that pesky 'don't experiment on non-consenting humans' hang-up we have.
replies(1): >>jodrel+Ga2
◧◩◪◨⬒⬓
9. inetkn+vH[view] [source] [discussion] 2025-07-28 04:43:43
>>jodrel+Rs
> it’s hard to argue that you benefit from the tool you use being sidelined or defunded because corporate thinks nobody uses it.

Let the corporation suffer then. With an open API, a third party will make a better one. Microsoft can buy that; corporations have a habit of doing that.

> “Talk to your users” doesn’t solve this because there are millions of computers running scripts

Why are you worried about the problems that scripts face? If the developer encounters issues in scripts, the developer can work to fix it. Sometimes that might mean filing a bug report... or a feature request for better documentation. Or the developer might get frustrated and use something better. Like bash.

> there are millions of computers running scripts and no way to know who they are or contact them

Why do they matter to you, or a corporation then?

> they would not remember how often they launched it.

If your users aren't interacting with you for feature requests and bug reports, then either you don't have users or you don't have good enough reachability from the users to you.

replies(2): >>charci+rQ >>jodrel+j92
◧◩
10. bayind+ZP[view] [source] [discussion] 2025-07-28 06:30:57
>>nicce+z3
Exactly. What users do on their computers is their own data. It's up to them to share it or not.
◧◩◪◨⬒⬓⬔
11. charci+rQ[view] [source] [discussion] 2025-07-28 06:34:41
>>inetkn+vH
>Let the corporation suffer then.

Corporations provide value to others. It's not just the corporation that is missing out.

replies(1): >>bayind+XQ
◧◩◪◨⬒⬓
12. bayind+BQ[view] [source] [discussion] 2025-07-28 06:35:57
>>jodrel+Rs
This is a systemic problem on Microsoft's side, it's not an upside of telemetry.

To be clear, I consent to send telemetry from some of the tools I use and deploy.

Their common pattern? They wait a bit, and ask nicely about whether I want to participate. Also, the dialog box asking the question defaults to off.

I read the fine print, look a the data they push, ponder and decide whether I'm cool with it or not.

Give me choice, be upfront and transparent. Then we can have a conversation.

◧◩◪◨⬒⬓⬔⧯
13. bayind+XQ[view] [source] [discussion] 2025-07-28 06:40:05
>>charci+rQ
Corporations provide value to their shareholders. The things they sell and their customers are the product. They care about neither.
◧◩◪◨⬒⬓⬔
14. jodrel+j92[view] [source] [discussion] 2025-07-28 17:07:46
>>inetkn+vH
> "use something better. Like bash."

Bash isn't better.

> "Why are you worried about the problems that scripts face? Why do they matter to you?"

because I write and run such scripts.

> "Let the corporation suffer then"

Microsoft wouldn't suffer, PowerShell users would suffer.

> "sometimes that might mean filing a bug report... or a feature request for better documentation. "

In this scenario the PowerShell team has been defunded or sacked. Who will the bug report go to? Who will implement the feature request?

> "If your users aren't interacting with you for feature requests and bug reports, then either you don't have users or you don't have good enough reachability from the users to you."

Users are interacting with Microsoft for feature requests and bug reports. There are a thousand open issues on https://github.com/powershell/powershell/ and many more which were closed "due to inactivity". What difference does that make if Corporate doesn't want to fund a bigger team to fix more bugs unless it can be shown to benefit a lot of customers not just "a few" devs who raise issues?

replies(1): >>inetkn+Ja2
◧◩◪◨⬒⬓⬔
15. jodrel+Ga2[view] [source] [discussion] 2025-07-28 17:14:38
>>Eisens+Hw
The parent said "talk to your users instead of telemetry" and I said "there are scenarios where telemetry can get information that you cannot get by talking to users". How did you go from that to "experimenting on non-consenting humans"?

To take your logic to its extreme, you have a disease and are prescribed pills, and the pharmaceutical company says "we will track when you take the pills - unless you don't want us to?" and you would prefer the researchers get shut down for not knowing whether anyone actually takes the pills, and an unlimited number of people die from treatable diseases that don't get cured.

replies(3): >>inetkn+2b2 >>Eisens+zk2 >>bayind+3Q2
◧◩◪◨⬒⬓⬔⧯
16. inetkn+Ja2[view] [source] [discussion] 2025-07-28 17:14:48
>>jodrel+j92
> Bash isn't better.

It is, by virtue of running on Linux.

> because I write and run such scripts.

'kay. Learn how to do Engineering and the software will come just fine. You don't need telemetry to tell you anything about scripts. You need good error reports for your users to send to you instead.

> Microsoft wouldn't suffer, PowerShell users would suffer.

So what you're saying is that Microsoft doesn't care about its users. PowerShell users should use products from better companies then.

> In this scenario the PowerShell team has been defunded or sacked. Who will the bug report go to? Who will implement the feature request?

Why were they sacked?

Oh, right, because they didn't interact with their users.

Who will the bug report go to? Clearly it's the same as before: nobody. That's a Microsoft problem.

> What difference does that make if Corporate doesn't want to fund a bigger team to fix more bugs unless it can be shown to benefit a lot of customers not just "a few" devs who raise issues?

If Corporate doesn't want to fund bugfixes and features for people who actually file bug reports and talk to you, then that's poor behavior of corporate. Why do you want to contribute to the decline of your users privacy?

◧◩◪◨⬒⬓⬔⧯
17. inetkn+2b2[view] [source] [discussion] 2025-07-28 17:16:31
>>jodrel+Ga2
> I don't understand how you got from "there are scenarios where telemetry can get information that you cannot get by talking to users, here is one example" to "experimenting on non-consenting humans". What is the connection?

The connection is clear if your salary doesn't require you to not understand it.

Developers don't opt-in to telemetry? Maybe it's because they don't want to enable that telemetry, your experiments be damned.

Use proper engineering to demonstrate that your scripts work instead of demanding that users be your free software test team.

replies(1): >>jodrel+8R9
◧◩◪◨⬒⬓⬔⧯
18. Eisens+zk2[view] [source] [discussion] 2025-07-28 18:06:29
>>jodrel+Ga2
You said 'but we wouldn't have a lot of improvement without telemetry'. I am saying that we could have a lot of improvement in a lot of things if we wanted. We could have breakthroughs in medicine if we allowed human experimentation. The question is, where is that that line? Your argument doesn't address that, it just tries to justify something that people think it morally wrong by stating that we get use from it.
replies(1): >>jodrel+ER9
◧◩◪◨⬒⬓⬔⧯
19. bayind+3Q2[view] [source] [discussion] 2025-07-28 20:53:48
>>jodrel+Ga2
Medical research and consent doesn't work like this. If you track your patients without their consent, or you share their data without their explicit consent, you'll land in very hot water, which will cook you even before you can scream.

Similarly, a medical trial will take a very detailed consent before you can start.

Your opt-out telemetry is akin to your insurance sending you powered and Bluetooth enabled toothbrushes out of the blue to track you and threaten to cancel your insurance if you don't use that toothbrush and send data to them.

Or as a more extreme example, going through an important procedure not with the known and proven method but with an experimental one, because you didn't opt-out and nobody bothered to tell you this. In reality, you need to sign consent and waiver forms to accept experimental methods.

replies(1): >>jodrel+sS9
◧◩◪◨⬒⬓⬔⧯▣
20. jodrel+8R9[view] [source] [discussion] 2025-07-31 05:04:00
>>inetkn+2b2
> "Use proper engineering to demonstrate that your scripts work instead of demanding that users be your free software test team."

This telemetry is not about demonstrating that scripts work, as I have said to you multiple times.

◧◩◪◨⬒⬓⬔⧯▣
21. jodrel+ER9[view] [source] [discussion] 2025-07-31 05:09:02
>>Eisens+zk2
> "You said 'but we wouldn't have a lot of improvement without telemetry'."

I did not say that. Within the context of Microsoft's internal funding, maybe, but we could have the same improvement by Microsoft throwing more money at the PowerShell team without this telemetry. The core thing I said was that the information the telemetry gets cannot be got by "talk to your users" not that the telemetry leads to amazing improvements.

It is still difficult for you to make the case that someone choosing to download PowerShell can be "not consenting" (and before you reply saying "PowerShell ships with Windows", the PowerShell which has telemetry does not [yet] ship with Windows).

◧◩◪◨⬒⬓⬔⧯▣
22. jodrel+sS9[view] [source] [discussion] 2025-07-31 05:23:37
>>bayind+3Q2
> "Medical research and consent doesn't work like this."

Yes, I agree that person's comparison to non-consensual medical research is stupid.

> "Your opt-out telemetry is akin to your insurance sending you powered and Bluetooth enabled toothbrushes out of the blue to track you and threaten to cancel your insurance if you don't use that toothbrush and send data to them."

More akin to your insurance company making a public RFC where you can discuss the coming telemetry, then you choosing to ask your insurance for an optional toothbrush, being able to opt out of telemetry if you want to, the insurance company documenting how to opt out[1], you being able to edit the toothbrush source code to remove the telemetry entirely with the insurance company's approval because it's MIT licensed, and absolutely nothing happening to you if you opt out.

[go to top]