ASF hosted binaries collecting user data without an explicit opt-in; thread on general@incubator.apache.org

[Wade Chandler <wa...@apache.org>]

There is a thread on general@incubator.apache.org with the subject "ASF
hosted binaries collecting user data without an explicit opt-in" we may
need to pay attention to regarding Apache binaries uploading user data etc.
Apparently there was also some discussion on legal, which I don't think I
am a member, and will see if I can find.

Anyways, it seems we should make sure we have a plan along with sign off on
things like the UI gesture collector, exception reporting, auto update, and
any others, as well as a mechanism for that data to be uploaded once at
Apache.

Thanks

Wade

Re: ASF hosted binaries collecting user data without an explicit opt-in; thread on general@incubator.apache.org

[Bertrand Delacretaz <bd...@apache.org>]

Hi,

On Wed, Jun 7, 2017 at 5:17 AM, Wade Chandler <wa...@apache.org> wrote:
> There is a thread on general@incubator.apache.org with the subject "ASF
> hosted binaries collecting user data without an explicit opt-in"...

Yes that's

https://lists.apache.org/thread.html/162f2b5f801e28336eef122b68717340f4719d29b841bc3ad6cbd39c@%3Cgeneral.incubator.apache.org%3E

> ...it seems we should make sure we have a plan along with sign off on
> things like the UI gesture collector, exception reporting, auto update, and
> any others, as well as a mechanism for that data to be uploaded once at
> Apache....

Yes those things need to be reviewed in light of the ASF's privacy
policy, https://www.apache.org/foundation/policies/privacy.html -
which might be extended soon to cover such things.

As I said on general@ best is to document what happens along with
decisions made on a wiki page and/or jira tickets, to have a simple
permanent URL to point people to that documents this.

-Bertrand