{"action":"created","issue":{"url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/74","repository_url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues","labels_url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/74/labels{/name}","comments_url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/74/comments","events_url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/74/events","html_url":"https://github.com/uBlockOrigin/uBlock-issues/issues/74","id":332304001,"node_id":"MDU6SXNzdWUzMzIzMDQwMDE=","number":74,"title":"Privacy and Microsoft's acquisition of GitHub","user":{"login":"emanruse","id":40140013,"node_id":"MDQ6VXNlcjQwMTQwMDEz","avatar_url":"https://avatars0.githubusercontent.com/u/40140013?v=4","gravatar_id":"","url":"https://api.github.com/users/emanruse","html_url":"https://github.com/emanruse","followers_url":"https://api.github.com/users/emanruse/followers","following_url":"https://api.github.com/users/emanruse/following{/other_user}","gists_url":"https://api.github.com/users/emanruse/gists{/gist_id}","starred_url":"https://api.github.com/users/emanruse/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/emanruse/subscriptions","organizations_url":"https://api.github.com/users/emanruse/orgs","repos_url":"https://api.github.com/users/emanruse/repos","events_url":"https://api.github.com/users/emanruse/events{/privacy}","received_events_url":"https://api.github.com/users/emanruse/received_events","type":"User","site_admin":false},"labels":[{"id":902461563,"node_id":"MDU6TGFiZWw5MDI0NjE1NjM=","url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/labels/invalid","name":"invalid","color":"e4e669","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2018-06-14T08:38:51Z","updated_at":"2018-06-15T12:24:41Z","closed_at":"2018-06-14T09:53:47Z","author_association":"NONE","body":"Now that Microsoft has acquired GitHub it means that each and every time a user downloads built-in filter list (GithHub hosted) the user reports to Microsoft \"I am online at this time of the day, here is my IP address, my browser info - profile me please\".\r\n\r\nConsidering that:\r\n\r\n\"uBlock Origin's main goal is to help users neutralize such privacy-invading apparatus\"\r\n\r\nplease move filter lists out of GitHub. Microsoft (a PRISM participating company) doesn't have a history of respecting user privacy."},"comment":{"url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/comments/397604615","html_url":"https://github.com/uBlockOrigin/uBlock-issues/issues/74#issuecomment-397604615","issue_url":"https://api.github.com/repos/uBlockOrigin/uBlock-issues/issues/74","id":397604615,"node_id":"MDEyOklzc3VlQ29tbWVudDM5NzYwNDYxNQ==","user":{"login":"emanruse","id":40140013,"node_id":"MDQ6VXNlcjQwMTQwMDEz","avatar_url":"https://avatars0.githubusercontent.com/u/40140013?v=4","gravatar_id":"","url":"https://api.github.com/users/emanruse","html_url":"https://github.com/emanruse","followers_url":"https://api.github.com/users/emanruse/followers","following_url":"https://api.github.com/users/emanruse/following{/other_user}","gists_url":"https://api.github.com/users/emanruse/gists{/gist_id}","starred_url":"https://api.github.com/users/emanruse/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/emanruse/subscriptions","organizations_url":"https://api.github.com/users/emanruse/orgs","repos_url":"https://api.github.com/users/emanruse/repos","events_url":"https://api.github.com/users/emanruse/events{/privacy}","received_events_url":"https://api.github.com/users/emanruse/received_events","type":"User","site_admin":false},"created_at":"2018-06-15T12:24:41Z","updated_at":"2018-06-15T12:24:41Z","author_association":"NONE","body":"@jspenguin2017\r\n\r\nI am aware of how logs work and of the inability to check every line of code. And yes - I do stay offline as much as I can. Of course I understand there is no magic bullet and all the rest of it but lets not derail into something off-topic, although it might be related. (sorry if my previous post sounded like an attempt to do so)\r\n\r\n> It does, you just didn't bother to read: https://github.com/gorhill/uBlock/wiki/Privacy-policy\r\n\r\nI have read it but it lacks the explicit clarity that \"a remote server\" actually means a company and in this way the extension becomes a tool for sending personal data. Also it seems that policy doesn't reflect the current situation as it says:\r\n\r\n> The project is currently hosted on github.com, which is owned by GitHub, Inc.\r\n\r\n> GDPR does not apply to non-profit personal projects.\r\n\r\nI think you are wrong about that. GDPR is about data protection in general regardless of profit. Otherwise you may set a \"non-profit personal project\" and sell huge amounts of personal data which is surely a contradiction with GDPR. Check paragraph (15) and the definitions in [Article 4](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN#d1e1489-1-1)\r\n\r\nIs the extension an automated means? - Yes.\r\nIs there a filing system? - Yes (server logs -> DBs)\r\nDoes the extension process personal data as per GDPR definitions - Yes, as it receives it and transmits it to a filing system.\r\n\r\nSo considering that in this case @gorhill is a controller and a processor (using subprocessors) the extension needs to add transparency about all that and ask for explicit consent before making any connection whatsoever.\r\n\r\n> RawGit only sync updates once a day.\r\n\r\nThanks for explaining. I didn't know that.\r\n\r\nBTW I see rawgit.com uses Cloudflare = all traffic is decrypted by CF before it is communicated back and forth to the origin server + CF knows who visits, when etc. Also it is not immediately transparent how RawGit handles personal data - there is no privacy policy, nothing. Technically it is possible to profile and track user activity with a pattern of static IP address and user agent based on repeated connections for downloading the same filter files.\r\n\r\n> If you got a server, you should host filters for your clients. This also lifts loads off the filter servers.\r\n\r\nThanks for the feedback. I agree with you. Ideally lists should be decentralized somehow but I have no idea how exactly.\r\n\r\n@gwarser - Thanks for the advice. I always have JS and cookies blocked by default and when I enabled them it is temporarily (in a \"private/incognito\" window), so I don't think what you mention applies to my particular setup."}}
{"actor":{"display_login":"emanruse"}}