korlja
Joined 4 years ago
Joined 4 years ago
/In-Reply-To:.*[email protected]/ REJECT reply-storm
However, blocking the whole thread that will originate is not as easy.
See e.g. some comparison website like verivox.de (beware the dark patterns, use "Postleitzahl" 20095 for Hamburg center).
Edit: and those are 2022 prices, usually most suppliers have a 12month fixed price which changes on 1st of January. So all the current price hikes in power and gas will only be priced in in 2023, current offers usually don't include those yet.
There is a rich repertoire of non-verbal communication available to us that most people will understand. And if you use them, the problem instantly vanishes.
That people don't use them is imho not a problem of not knowing or not understanding. It is a problem of lacking civility. Of the desire to assert dominance by interrupting. Of asserting dominance by talking for a long time. And of the myopic concentration on verbal communication.
Now if you are on the phone, there isn't much else you can do, of course...
All in all, no matter the above nits, they are obviously trying to shift blame away from their vehicle.
Translation of the part of the article I'm talking about: BMW said on tuesday: "The car has a driver assistance system of level 2, which are even today shipped in normal consumer vehicles and which support the driver if they so desire. With level 2 vehicles, the driver is generally always responsible." Only with highly automated vehicles of level 3, the driver may, under certain circumstances, delegate driving fully to the vehicle.
BMW said: "At the moment we are researching the exact circumstances. Of course we are in a close exchange with the authorities. But it is already certain: The BMW involved was not an autonomously driving vehicle".
We did something similar for a project, which got approved by the relevant data protection officer: hash(IP + daily secret) as an identifier in the logs. This will be used to count unique visitors, the wraparound at 24:00:00 didn't matter to us. The daily secret is just a random number that our one (small setup) application server generates each day. It is never written out to disk or database, so an appserver restart also recreates that secret, it is strictly kept in RAM. That way, we could argue that, barring extreme measures like attaching a debugger to get the secret, we technically prevented deanonymisation.
But that was just a small-scale project, has never been tested in court and the usual YMMV, IANAL, ...
Edit: I think some webservers can be configured to do something similar
For that perception to change, you have to educate users about their concrete, relevant and obvious benefit from analytics. I think this is hard or impossible. I also think that all the bad players in the market make this even more impossible, because you get lumped in with them.
I think the easiest solution is log analytics, preferably from anonymized or pseudonymized logs that are present anyways. That way, you don't collect any extra data, and as long as you do not keep the logs but only aggregated results, privacy isn't an issue. While a privacy policy and legal team need of course be aware of log analytics, the users cannot adblock it away, so that might be a plus. Also, no scripts, no cookies, no performance impact, etc. But of course the insight is limited by whatever is logged. Maybe some (privacy-preserving) data can be added to the URL parameters to augment the logs and provide a little more insight.
Another solution (that I just thought of, no idea if it would work) is that of recruiting users for testing your website under observation by the UI team. While this might invoke the image of recruiting 20 people off the street and sitting them down in a lab, I have something totally online in mind: Offer a voucher (or something) in return for participation. Participation should be instant. The users session should be connected such that the UI people on duty can see the website interaction (ala VNC, but limited to the website in question, so this should be possible by getting geometry, mouse position and keypresses alone via javascript). In case of difficulties, the UI team can interact with the user via voice chat (preferred) or text chat. After the user has finished their task, maybe ask them a few extra questions. You will gain much better insights, because you can ask for motivations and problems. You can point the user at the intended way and see if it works at all. But of course this approach requires lots of manpower and is technically challenging.
My absolute demands would be: Respect the relevant laws ala GDPR. Respect the DNT bit my browser sends. That way, you would already be above 99% of the analytics industry imho.
But unfortunately, as far as my opinion goes, any kind of analytics and tracking just results in an instant "yuck" reaction, like a spider landing on my lap. I don't bother with analyzing it, I'll just try to get rid of it as quickly as possible.
The notion of privacy-friendly analytics has also been thoroughly burned by sleazy marketing departments outright lying. Or technical solutions that claimed to be privacy-friendly, but actually didn't really because of technical reasons. Or technical solutions being so complicated and obscure that it might as well be a privacy-protecting voodoo ritual for all a user knows.
If you want to fix this, make a RedHat license be significantly cheaper than the equivalent Windows product. Charge for support by ticket/case and only support licensed boxes. You'll earn a lot more because it'll look cheaper to the beancounters.