manyfold, to 3DPrinting
@manyfold@3dp.chat avatar

The next release of Manyfold will include OPTIONAL anonymous usage tracking, purely so that we can count how many people are running it.

This is OFF BY DEFAULT, and all the information that's sent and stored is shown in the UI before you turn it on. We've tried to be as minimal, clear and up-front as possible.

Feedback welcome at https://github.com/manyfold3d/manyfold/pull/2183 if you have any thoughts.

@3dprinting

ValerieSonh, to firefox
@ValerieSonh@masto.ai avatar

starts new data-gathering program https://blog.mozilla.org/en/products/firefox/firefox-search-update/ The article explains how to opt out. "Same" privacy indeed. 😐

boilingsteam, to firefox
@boilingsteam@mastodon.cloud avatar

Firefox is going to do more telemetry... again! this time on your web searches. https://blog.mozilla.org/en/products/firefox/firefox-search-update/
the battle to make Firefox go to zero market share continues. well done Mozilla for knowing how to read a room.

chuttenblog.wordpress.com, to firefox
@chuttenblog.wordpress.com@chuttenblog.wordpress.com avatar

This will mostly be helpful to Firefox Desktop folks, so if you’re not one of those, please instead enjoy a different blogpost. I recommend this one about the three roles of data engagements.

So you’ve found yourself a plot that looks like this:

A timeseries bar plot that begins as an uptake curve then has a sudden drop around February 22. There is no legend and no y-axis as they are unimportant, and sometimes I like to be cagey about absolute figures.

You suspect this has something to do with a code change because, wouldn’t you know it, the sharp decline starts around Feb 22 and we released Firefox 123 on Feb 20. But where do you go from here? Here’s a step-by-step of how I went from this plot arriving in Slack#data-help to finding the bugfix that most likely caused the change:

  1. Ensure this is actually a version-specific change

It’s interesting that the cliff in the plot happened near a release day, and it’s an excellent intuition to consider code releases for these sorts of sea-changes in data volume or character. But we should verify that this is the case by grouping by mozfun.norm.truncate_version(app_version, 'major') AS major_version which in our case gives us:

The same timeseries bar plot as before, but coloured to show groups by major Firefox Desktop version. The cliff happens solely in the colours for Firefox 123 and above.

Sure enough, in this case the volume cliff happens entirely within the Firefox 123+ colours. If this isn’t what you get, then it’s somewhat less likely that this is caused by a client code change and this guide might not help you. But for us this is near-certain confirmation that the change in the data is caused by a code change that landed in Firefox 123… but which one?

( This is where I spent a little time checking some frequent “gotcha” changes that could’ve happened. I checked: was it because data went from all-channel to pre-release-only? (No, the probe definitions didn’t change and the fall isn’t severe enough for that (would look more like an order of magnitude)) Was it because specific instrumentation within the group happened to expire in Fx123? (No, the first plot is grouped by specific probe, and all of the groups shared the same shape as their sum) Was it an incredibly-successful engagement-boosting experiment that ended? (No, there haven’t been any relevant experiments since last July) )

  1. Figure out which Nightly builds are affected

Firefox Desktop releases new software versions twice a day on the Nightly channel. We can look at the numbers reported by these builds to narrow down what specific 12h period the code landed that caused this drastic shift. Or, well, you’d think we could, but when you group by build_id you get:

Another bar plot, but instead of the x-axis being time it is now "build id" which is a timestamp of a sort. The data is all over the place and patchy with no or little clear pattern.

Because our Nightly population isn’t randomly distributed across timezones, there are usage patterns that affect the population who use which build on which day. And sometimes there are “respins” where specific days will have more than 2 nightlies. And since our Nightly population is so small (You Can Help! Download Nightly Today!), and this data is a little sparse to begin with, little changes have big effects.

No, far more commonly the correct thing to do is to look at what I call a “build day”. This is how GLAM makes things useful, and this is how I make patterns visible. So group by SUBSTR(build_id, 1, 8) AS build_day, and you get:

It looks like a timeseries bar plot, but the x-axis is "build day" so it isn't quite. Notably, there's a sudden cliff starting with the nightlies for January 18.

Much better. We can see that the change likely landed in Jan 18’s nightlies. That Jan 18-20 are all of a level suggests to me that it probably ended up in all of Jan 18’s nightly builds (if it only landed in one of the (normally) two nightly builds we’d expect to see a short fall-off where Jan 18 would be more like an average between Jan 17 and 19.).

Regardless of when during the day, we’re pretty sure we have this nailed down to only one day’s worth of patches! That’s good… but it could be better.

  1. Going from build days to pushlog

Ever since I was the human glue keeping the (now-decommissioned) automated regression detection system “alerts.tmo” working, I’ve had a document on my disk reminding me how to transform build days or build_ids into a “pushlog” of changes that landed in the suspect builds. This is how it works:

  1. Get the hg revisions of the suspect builds by looking through this list of all firefox releases for the suspect builds’ ids. You want the final build of the day before the first suspect build day and the final build of the final suspect build day, which in this case are Jan 17 and Jan 18, so we get f593f07c9772 and 9c0c2aab123:

A visual excerpt of the firefox releases list https://hg.mozilla.org/mozilla-central/firefoxreleases. For illustration only.

  1. Put them into this template: https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange={}&tochange={} — which gives us https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=f593f07c9772&tochange=9c0c2aaab123

This gives you a list of all changes that are in the suspect builds, plus links to the specific code changes and the relevant bugs, with the topic sentence from each commit right there for you. Handy!

  1. Going from a pushlog to a culprit

This is where human pattern matching, domain expertise, organizational memory, culture and practices, and institutional conventions all combine… or, to put it another way, I don’t know how to help you get from the list of all code that could have caused your data change to the one (or more) likely suspects. My brain has handily built me a heuristic and not handed me the source code, alas. But I’ve noticed some patterns:

  • Any change that is backed out can be disregarded. Often for reasons of test failures changes will be backed out and relanded later. Sometimes that’s later the same day. Sometimes that’s outside our pushlog. Skip any changes that have been backed out by disregarding any commits from a bug that is mentioned before a commit that says “Backed out N changesets (bug ###)…”.
  • You can often luck out by just text searching for keywords. It is custom at Mozilla to try to be descriptive about the “what” of a change in the commit’s topic, so you could try looking for “telemetry” or “ping” or “glean” to see if there’s anything from the data collection system itself in there. Or, since this particular example had to do with Firefox Relay’s integration with Firefox Desktop, I looked for “relay” (no hits) and then “form” (which hit a few times, like on the word “information”, … but also on the culprit which was in the form detector code.)
  • This is a web view on the source code, so you’re not limited to what it gives you. If you have a mozilla-central checkout yourself, you can pull up the commits (if you’re using git-cinnabar you can use its hg2git functionality to change the revs from hg to git) and dump their sum-total changes to a viewer, or pipe it through grep, or turn it into a spreadsheet you can go through row-by-row, or anything you want. I’m lazy so I always try keywording on the pushlog first, but these are always there for when I strike out.
  1. Getting it wrong

Just because you found the one and only commit that landed in a suspect build that is at all related, even if that commit’s bug specifically mentions that it fixed a double-counting issue, even if there’s commentary in the code review that explains that they expect to see this exact change you just saw… you might be wrong.

Do not be brusque in your reporting. Do not cast blame. And for goodness’ sake be kind. Even if you are correct, being the person who caused a change that resulted in this investigation can be a not-fun experience. Ask Me How I Know.

Firefox Desktop is a complex system, and complex systems fail. It’s in their nature.


And that’s it! If you have any comments, question, or (better yet) improvements, please find me on the :mozilla.org channel on Matrix and I’d love to chat.

:chutten

https://chuttenblog.wordpress.com/2024/04/10/how-to-go-from-looks-like-something-changed-in-a-firefox-desktop-version-to-here-is-a-list-of-potential-culprit-bugs/

OfBeingTheOneWhoDoesItWhyDoYouAsk

image/png
image/png

linuxuserspace, to history
@linuxuserspace@mastodon.social avatar

Today in User Space
📈We enable MORE #telemetry
🐧Get enticed by #immutable distros
📖Look back into our own personal #history
🗒️Fall down the #notes rabbit hole
🎨And add a splash of color to our #CLI

#Linux #OpenSource #FOSS #LinuxUserSpace
https://www.linuxuserspace.show/415

scottwilson, to firefox

Hey, did you know that Firefox, even when configured to be more secure and private, still bleeds data?

Well, you may want to disable the telemetry features reporting back to Mozilla. It's a VERY chatty feature.

For example, in just 24 hours 1 Firefox browser on my home generated tons of junk that I blocked - more than a factor of 10 more than anything else!

You can configure Firefox to NOT send any of this data: https://support.mozilla.org/en-US/kb/share-data-mozilla-help-improve-firefox

mjgardner, to Mac
@mjgardner@social.sdf.org avatar

Weird flex but OK: https://arc.net/gift/friend-of-mark

Looking for a top-notch for your ? Look no further than . With its advanced Split Views and other impressive features, Arc is the perfect tool to help you improve your browsing experience. Plus, it's built on the platform, so you can rest assured that it's fast, stable, and secure.

mjgardner,
@mjgardner@social.sdf.org avatar

@dboehmer patiently informs you of its optional on install, it is opted out by default, and it can be easily switched off any time. Just like many projects.

Bellingen, to wildlife
@Bellingen@mastodon.au avatar

Re-establish koala populations on fragmented habitats

"Where you've had a population grow from a small number of individuals, there's always potential for inbreeding."

"Drones with thermal cameras have been used to count the koalas and sound recorders are being installed in national parks, and on Crown land and farms along a 100-kilometre stretch of the river. We put the data through a computer and it takes hours and hours and hours of recording and just chops out the little snippets where it thinks there's a koala — then those little snippets get manually verified."

Best practice would be to refrain from logging koala habitat in the first place.

https://www.abc.net.au/news/2023-11-06/narrandera-koala-colony-model-for-re-establishing-populations/103009652

vintprox, to Discord
@vintprox@techhub.social avatar

deserves a set of more performant and native applications than being attributed to a page in 's playbook. Stay with me: are we really just going to blindly accept flaws of this messenger and promote it at the same time?

The fact that it only has got to the head of Discord it's long overdue to verify this popular distribution, I think, is worth a comment on itself, but I'll digress. It is nice that enthusiasts made arrangements for this verification and I have zero disagreements with the result. I'm just stupified that, in all this effort, Discord is treated like some spoon-fed royal baby - at least, according to reactions I see.

So, what was it... Flathub already had a library of nice actively developed before these news. I don't see the point in exaggerating the scales on some centralized chat thingabob with well-known and problems, that's all. Thank you for visiting my talk! ❤

itnewsbot, to modeltrains
@itnewsbot@schleuss.online avatar

ISS Mimic Brings Space Station Down to Earth - Built at a cost of more than $150 billion over the last twenty-five years, the Int... - https://hackaday.com/2023/10/06/iss-mimic-brings-space-station-down-to-earth/

Galletasalada, to infosec

Soon I hope people suggest driving an older car without these telemetry features to improve your security posture. Even you are using all and secure apps and stuff and everything encrypted with a dumb phone, etc. that you don't keep on you to be tracked you could still be thwarted by vehicle and targeted on a very granular level unless you're driving something old. https://www.theguardian.com/business/2023/sep/06/cars-collect-extensive-personal-data-on-drivers-study-warns

louischance, to random French
@louischance@piaille.fr avatar

C'est scandaleux.

Il faut installer l'appli de La Poste sur son smartphone pour utiliser ses crédits .

L'appli comporte des traqueurs, et ne fonctionne que si on l'installe depuis Google Play sous Android.

Mon smartphone est dégooglisé. Installer depuis ne marche pas.

Leur "solution" ?

Envoyer un courrier postal, et attendre 4 semaines qu'il soit traité.

C'est censé être un service public, et on oblige les gens à disposer d'un smartphone relié à Google ...

benjamin,
itnewsbot, to space
@itnewsbot@schleuss.online avatar

This Model Mimics the International Space Station - It’s not an overstatement to say that the International Space Station (ISS for sho... - https://hackaday.com/2023/09/04/this-model-mimics-the-international-space-station/

domino_joyce, to random
@domino_joyce@ecoevo.social avatar

We used and and found that migration success of Atlantic depended on genotype. See what you think:
https://www.biorxiv.org/content/10.1101/2023.08.15.553252v1
(boosts welcome, first time I’ve properly tried to share some science since the other place)







Photo: Stuart Brabbs, Ayrshire Rivers Trust

remixtures, to hardware Portuguese
@remixtures@tldr.nettime.org avatar

: "Though that sounds innocuous, Intel provides a long list of the types of data it collects, many unrelated to your computer's performance. Those include the types of websites you visit, which Intel says are dumped into 30 categories and logged without URLs or information that identifies you, including how long and how often you visit certain types of sites. It also collects information on "how you use your computer" but offers no details. It will also identify "Other devices in your computing environment." Numerous performance-related data points are also captured, such as your CPU model, display resolution, how much memory you have, and, oddly, your laptop's average battery life.

Though this sounds like an egregious overreach regarding the type of data captured, to be fair to Intel, it allows you to opt out of this program. That is apparently not the case with Nvidia, which doesn't even ask for permission at any point during driver installation, according to TechPowerUp. AMD, on the other hand, does give you a choice to opt out like Intel does, regardless of what other options you choose during installation, and even provides an explainer about what it's collecting."

https://www.extremetech.com/gaming/intels-gpu-drivers-now-collect-telemetry-including-how-you-use-your-computer

bespacific, to privacy
@bespacific@newsie.social avatar

Intel's Drivers Now Collect , Including 'How You Use Your Computer'. The feature is enabled by , but you can disable it during installation. https://www.techpowerup.com/312122/psa-intel-graphics-drivers-now-collect-telemetry-after-opt-in

artbol, to intel
oilipheist, to fedora

On , I'm a proponent of privacy respecting telemetry yet I can't help but feel that the current proposal raises some questions about how -software in general curates things.

https://gitlab.gnome.org/GNOME/gnome-software/-/blob/main/doc/vendor-customisation.md#featured-apps-and-editors-choice

"Metrics can also be used to inform user interface design decisions. For example, we want to collect the clickthrough rate of the recommended software banners in GNOME Software to assess which banners are actually useful to users."

anderseknert, to random
@anderseknert@hachyderm.io avatar
dis, to grafana

Today's adventure in comes from . (Not a surprise, but this is why I run egress filters and dns in my clusters.)

I know not everyone agrees that is a dark pattern, but you might agree with me about this one after you see it documented:

> # -- Optional analytics configuration
> analytics: {}

Enlightening, isn't it? There are other empty blocks, but they are either fairly standard or are described elsewhere in the document.

If you are familiar with , you won't despair because you have the power of analytics.enabled: false. That works on the rest of this chart and is the standard way to en/disable things.

It doesn't work that way.

Let me save you some time with the terrible new code search. Here is the actual syntax:
"analytics.reporting_enabled: false"

This was caught by and enforced by an egress

major, to RedHat

Got asked several times this week on how I feel about the recent news.

Long story short: I'm still proud to play a small part in as well as the @fedora communities. I'm surrounded by talented people who work hard to deliver meaningful improvements for customers around the clock.

There's a ton of mud-slinging going on by people with agendas to push and views to count. That's the roughest part.

major,

I see tons of people getting so incredibly upset about the suggestion of in @fedora. It's a discussion thread. It's for discussion.

I'm on the Fedora Steering Community (FESCo) and discussions like these show me that the community is strong! I'd be horribly worried if someone suggested a feature and nobody said anything.

Nothing is set in stone. Speak up but please don't drag the whole community through the mud because a person proposed a change. Join the discussion!

drwhut, to linuxmint

Ah, sod it. I'm thinking about switching back to from .

Initially I switched because I needed the more up-to-date software, but it came with some annoying caveats (multimedia codec issues, NVIDIA driver updates, having to reboot after sleep). That, combined with the and drama, and at this point I'm feeling kinda home-sick for Mint :blobcatnotlikethis:

It's been a while, so hopefully the software is up-to-date enough for me now!

itsfoss, to random
@itsfoss@mastodon.social avatar

A privacy-friendly telemetry system on Fedora; a good idea?

https://news.itsfoss.com/fedora-40-privacy/

vfenners, (edited )

@itsfoss Collecting telemetry data on a private device is never privacy friendly and especially not when a company like IBM is behind it. The possibilities simply arouse too many desires.

adamw, to fedora
@adamw@fosstodon.org avatar
  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • GTA5RPClips
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • everett
  • InstantRegret
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • anitta
  • kavyap
  • modclub
  • normalnudes
  • cubers
  • osvaldo12
  • tacticalgear
  • Durango
  • khanakhh
  • ngwrru68w68
  • provamag3
  • Leos
  • tester
  • cisconetworking
  • ethstaker
  • megavids
  • lostlight
  • All magazines