Replies (1)

• @alwayscurious@infosec.exchange 2026-08-24 05:05

  @dalias@hachyderm.io @jangray@mastodon.social I had not thought of it from a human subject research perspective. Personally, I think it is in most users interests to have telemetry on, provided that they can trust it to be privacy-preserving. Developers simply cannot do as good a job without accurate usage statistics. The tyrrany of defaults means that explicit opt-in will not produce those. The best I can think of is: Have an explicit “yes or no”, with no default.Explicitly state what is being collected. Probably stuff like OS, hardware, rate at which various features are used, and other similar things.State (and ensure!) that the data is encrypted and processed in a trusted execution environment, and that only aggregate results are made available outside of it.Explain that these statistics are used to guide development, so if a user keeps telemetry off, their usage won’t appear in it.

  Open ##4539196