Mailing-List: contact dev-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cassandra.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Subject: Re: How is Cassandra being used?
References: 
 <CALdd-zi-MqBzjA4fqBc8y5XANya8F1_rBCR=s49PEGg+Kx6BjA@mail.gmail.com>
 <4EC43FF9.2040405@dehora.net> <4EC56026.5070607@sendmail.cz>
From: Dop Sun <sunht@dopsun.com>
Content-Type: text/plain;
	charset=us-ascii
In-Reply-To: <4EC56026.5070607@sendmail.cz>
Message-Id: <21F0D137-2C13-47C5-96F7-9576E9C86554@dopsun.com>
Date: Fri, 18 Nov 2011 08:01:53 +0800
To: "dev@cassandra.apache.org" <dev@cassandra.apache.org>
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (1.0)

I am not dev of cassandra, sub this list because i'm dev for app using it.

To me, this (phone home) opens a door, and it may designed to be used only f=
or carefully selected anonymous data:
1) but software has at least one bug (side effect), what happen it sends som=
ething more accidentally? Also, even today data we believe safe, but tomorro=
w it may turn out to be classified as sensitive, and you can not take back d=
ata which already out of door.
2) risk for future versions, this forces all upgrades to include review of t=
his anonymous data (if door opened, it is too easy to add a little bit next t=
ime, and next...), imagin every release, to invite compliance team to sign o=
ff... it may slow the adoption of new versions. And this does no good for he=
athy of Cassandra community/ user group.

As a user may not be right to vote here, but if I vote:
-1 for introducing this feature at all

But if it's eventually included:
+1 for separate code/ jar
=20

On 18 Nov, 2011, at 3:27 AM, Radim Kolar <hsn@sendmail.cz> wrote:

> Dne 16.11.2011 23:58, Bill napsal(a):
>> We'll turn this off, and would possibly patch it out of the code. That's n=
ot to say it wouldn't be useful to others.
> we patch out of code spyware in ehcache and quartz too. This is only way t=
o be sure that it will not be enabled by configuration mistake.
>=20
> We had similar stuff in our software (just version check) and had to remov=
e it after 14 days of customer complains. As correctly stated in comments - y=
ou will get results from self selecting group and this group will not includ=
e most important deployments running cassandra in production.
>=20
> There is zero benefit for company allowing cassandra to spy how many nodes=
, data, rows and CF they have and its bad idea to implement spyware into app=
lication used for working with sensitive data.