F40 Change Request: Privacy-preserving Telemetry for Fedora Workstation (System-Wide)

You are wrong! There are two levels of ABRT reporting: (a) automatic reporting of simple backtraces, which look like this, and (b) manual reporting to Bugzilla.

The automatic reporting is enabled by default; to disable it, you have to flip the toggle on the Privacy page of gnome-initial-setup or gnome-control-center (exactly the same as I’m proposing to do for general telemetry). This is fine because the automatic reports only contain function names; there’s no way these can ever accidentally contain personal data.

Manual reporting to Bugzilla, of course, only happens manually. These bug reports are much more valuable because they contain more data, most notably stack variables. Developers are more likely to be able to fix the crash compared to an automatic report. But occasionally there will be personal data on the stack. I’ve seen email addresses, passwords, porn URLs and other non-public URLs, and more show up in these backtraces. It just wouldn’t be fair to users to collect them automatically IMO. (Ubuntu actually does this, but their automatic reports are not public, so you have to be an Ubuntu developer to see them.)

We’re not Ubuntu though.

The context of this post is: what about enterprise policies that prohibit use of open source software that collects telemetry? Presumably Ubuntu use is prohibited as well?

I’m certainly not going to propose that we do something just because Ubuntu does, but for me to be concerned about enterprise policies I need to know what other software is prohibited by such policies. Same applies to VS Code and Firefox. I could certainly be wrong, but I suspect that Ubuntu is not actually banned in this environment. It just seems weird for a corporation to ban software because it has the capability of collecting telemetry, rather than simply turn it off.

1 Like