GraffSDK a Requires? Avoiding future facepalms

[dehann]

There is strong cause for users knowing precisely when 'the software' starts talking back to some server over the internet. This should only occur under the user's express desire to do so, for example along with a console message stating as much:

using GraffSDK # load first
using Arena    # cloud features are now enabled

# start cloud communication
cfg = GraffSDK.loadConfig(user...)
# printout to console confirming communication has started

...

Otherwise the entire code base might be perceived as 'not respecting privacy', precisely the opposite of what is intended!

cc @GearsAD

[GearsAD]

Not sure I see how Graff would be perceived as 'bad privacy behavior', but I fully get the optional requires.

[dehann]

Doesn't really matter what the intention was -- it is about perception and preemptive knowledge. Arena can be used for local memory only too. For reference see here:

• https://www.jonobacon.com/2012/12/07/on-richard-stallman-and-ubuntu/
• https://arstechnica.com/information-technology/2012/12/richard-stallman-calls-ubuntu-spyware-because-it-tracks-searches/
• https://thenextweb.com/insider/2012/12/07/richard-stallman-slams-ubuntu-as-spyware-prompting-canonicals-jono-bacon-to-call-fud/
• https://betanews.com/2012/12/10/richard-stallman-ubuntu-contains-spyware-shouldnt-be-installed-or-recommended/
  etc.

[GearsAD]

You need a login and explicit request to get your data, it’s very different to Dash story. Graff is not pushing any data upstream unless you explicitly ask, also Arena is just pulling down for rendering so it’s a moot point. Like that it’s an extension, don’t quite understand the motivation though.

[dehann]

Right, so the answer then is we should just say that explicitly on the cover page, before someone else starts spreading misinformation. I'm scared of misinformation spreading.

[GearsAD]

To be explicit here: Graff in Arena just pulls down data