Hacker News Reader

> The data collected could be used to identify a single person.

> How many people have the exact same combination of CPU, amount of RAM, location, disk sizes,GPU vendor/model, disk layout and installed applications ?

> If the data is unique enough, it's PII.

You can not connect a unique combination of cpu, gpu, disk size, with me, y0ghur7_xxx, if you don't collect my ip address or my name in any other way, so no, it's not "personal data" as per GDPR.

View on HN

And if a crash report for Firefox/Iceweasel/Chromium/Brave is sent, that contains a memory dump including your username?

Seems like enough to make the connection, if someone got ahold of all the data.

The wrote in the mail that crash reports are anonymised.

They may well be, the issue is something called re-identification. Even with anonymised data, even when using differential privacy, re-identification can be possible if you're not very careful. The more data you have, the more likely re-identification is.

Reply on news.ycombinator.com