Please don’t flame me too bad, I understand that although privacy and libre software are important to many in the Linux community, my opinions may be outside the scope of consideration for some and I respect that.

Personally, conscientious consumerism and privacy are some of the primary reasons I use Linux. I prefer community>private business>corporate when I am choosing products and services.

-System76

About 8 years ago I purchased a laptop from System76, the customer service was incredible and the machine exceeded my expectations in build quality and performance.

Recently I’ve been in the market for a smaller machine, like a Thinkpad X1, StarBook 14 or System76 Lemur.

Last week, when I visited the System76 website they used Plausible’s open source analytics on the home page (which is a great alternative to Google’s proprietary hardware fingerprinting algorithm), but once I added the laptop to my cart to checkout, I noticed the third-party trackers, apis.google and ajax.googleapis load on the webpage. Google’s reCAPTCHA was also required to complete the purchase. Hell, even Discord has switched to hCaptcha at this point citing their laughable “Gamer Privacy First” policy.

IMHO, I find it hypocritical that System76 does so much great work disabling Intel’s IME and contributing to coreboot, but chooses to embed proprietary tracking software on their website when open source alternatives are readily available.

  • Reaching out to System 76

After completing 14 reCAPTCHA’s I was finally able to get a dialogue with Stetson at System 76. He said that “System 76 takes user data privacy and security extremely seriously, but they would continue to use Google services.” His recommended solution was placing the order over the phone if I wasn’t comfortable having third-party tracking during checkout.

This is not a solution for me because I don’t want to do business with a company that monetizes user data for profit. In my experience, companies that monetize data (Alphabet, Meta, etc…) offer web services cheaper than competitors that don’t, in exchange for access to user data. So, if you’re getting a commercial service cheaper from a company that sells your user’s data, you’re also profiting from the sale by paying a lower premium for those services.

Personally, I do not think you’re taking user privacy “extremely” seriously if you’re running third party trackers and choosing reCAPTCHA (not a privacy respecting service) over hCaptcha on your website.

I really like System 76 and I want to support them with my next purchase, but presently I feel like they are saying one thing and doing another and choosing privacy respecting libre software some of the time when it suits their marketing, but proprietary anti-consumer tracking services when it’s more profitable.

  • robinj1995@feddit.nl
    link
    fedilink
    arrow-up
    76
    ·
    1 year ago

    Purist, hard-line stuff like this will honestly just get you nowhere in 2023. I get where you’re coming from, but it’s simply not realistic. This is what browser extensions are for.

    • words_number@programming.dev
      link
      fedilink
      arrow-up
      27
      ·
      1 year ago

      I don’t understand what’s not realistic about expecting from a company that markets itself as privacy focused to not add surveillance fascist services to their website. It’s not like they demand system76 to implement something crazy difficult. Quite the opposite, they just want them to not do something. That shit doesn’t add itself to a website. So just don’t fucking do it and you’re good. What’s unrealistic about that?

      • deong@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        edit-2
        1 year ago

        Well, we’re here on a web site discussing it, and the top two recommendations are “build one yourself from parts” and “buy a used one in cash”.

        Seems to me that it’s the very definition of unrealistic if the real world has almost no examples that do it.

        • words_number@programming.dev
          link
          fedilink
          arrow-up
          2
          ·
          1 year ago

          You’re right. I guess what I was trying to say is that I don’t think the author has unreasonable expectations. The fact that it is unrealistic that anyone follows these is kinda sad.

    • Qvest@lemmy.world
      link
      fedilink
      arrow-up
      16
      ·
      1 year ago

      Exactly. uBlock Origin exists for a reason. No one can block everything, but mitigation tactics exist, and to not use a product just because the website contains trackers, I don’t understand why one would do that if the product itself doesn’t contain trackers, but hey, people are different

    • milicent_bystandr@lemm.ee
      link
      fedilink
      arrow-up
      12
      ·
      1 year ago

      I dunno, us ordinary folks get a lot of benefit from the battles purists have waged before us. And sometimes they win big time.

    • victron@programming.dev
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 year ago

      I always wonder how those purists’ lives are better by being… like that. Is there an actual benefit or improvement?

  • Fazoo@lemmy.ml
    link
    fedilink
    arrow-up
    45
    ·
    1 year ago

    They just resell Chinese laptops anyway, or used to. I opted for a Framework laptop this time.

  • Michael Murphy (S76)@lemmy.world
    link
    fedilink
    English
    arrow-up
    39
    ·
    edit-2
    1 year ago

    It’s not as simple as you think it is. First, we use Plausible instead instead of Google Analytics, so tracking data is not being given to Google. If the choice was purely up to System76’s web team, use of Google services wouldn’t be required. However, you’ll be hard pressed to find any online store that accepts online payments without a captcha service, because most payment processors require it. System76’s payment processor also requires it, and will not allow you to substitute your own solution or bypass that requirement. Same as said here: https://lemmy.world/comment/3137069

    Customer services and other web-facing frontends are also a constant target of attacks, so a captcha service is required.

    • Thom Gray@lemmy.dbzer0.comOP
      link
      fedilink
      arrow-up
      7
      ·
      1 year ago

      Stripe is one of the largest payment providers on the Internet, they recommend hCaptcha, not Alphabet’s reCAPTCHA in their docs, so it’s obviously a choice. Please don’t proclaim to be “Extremely concerned” with customer privacy and choose a service provided by a data harvesting advertising company to save money when a privacy preserving option is available.

      https://stripe.com/docs/disputes/prevention/card-testing

    • Thom Gray@lemmy.dbzer0.comOP
      link
      fedilink
      arrow-up
      2
      ·
      1 year ago

      Michael, thank you for responding, but Google’s reCAPTCHA isn’t only required for payment on your site, it’s required just to send a message for customer service or to contact sales as I have done both recently. There are plenty of payment provider’s that to not mandate Google services. Personally I enjoy a lot of Google services when I choose to use them, but being mandated to use Google, as my child is forced to do attending school makes me wonder we companies like System 76 perpetuate this trend of the government and private industry forcing people to use services instead of letting consumers make the choice themselves in the so-called “free market.”

      • Michael Murphy (S76)@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        1 year ago

        Customer services and other web-facing frontends are a constant target of attacks, so a captcha service is required. This whole comment is hyperbole, honestly.

  • Southern Wolf@pawb.social
    link
    fedilink
    arrow-up
    31
    ·
    1 year ago

    It’s likely something out of their control. I imagine their payment processor either uses it, or requires the site to use it. Mostly to combat automated fraud.

    You likely won’t find any site, that has online shopping, that doesn’t use some sort of way to gatekeep against this behavior, unless it’s crypto-based. And even then it likely still has something like that. Even if the site redirects to Paypal, you’re gonna face that.

    Your approach simply isn’t realistic to the modern web. You can try uBlock, but blocking those connections likely will make the site ultimately not work for you.

    • Thom Gray@lemmy.dbzer0.comOP
      link
      fedilink
      arrow-up
      4
      ·
      1 year ago

      It’s certainly not out of their control and Stetson at System 76 confirmed that they choose Google as a business partner regarding the website. There are plenty of websites and online shopping services not using tracking scripts to monetize their customers data. Yes, most do, but most people also don’t use Linux as their desktop operating system or care much about privacy. Regarding not finding “any site”, Here are 2, I know off the top of my head. System 76 could also easily switch to hCaptcha (privacy preserving service) over reCAPTCHA as Discord previously did. If Discord is making better choices than System 76 regarding privacy respecting web services I think it speaks volumes about System 76’s claim to “take user privacy extremely seriously.”

      I’ve made purchases on both of these websites without being tracked by a third-party advertising company.

      https://www.adafruit.com/

      https://puri.sm/

      • twei@feddit.de
        link
        fedilink
        arrow-up
        3
        ·
        1 year ago

        adafruit is using cloudflare and it automatically loads stuff from paypal, amazon and cloudfront. it will also ship your stuff using dhl, ups etc.

        would you say that you trust all of those companies with your (meta)data? if yes, reCAPTCHA won’t make a difference. although i do agree that everyone should use hCaptcha

        • Southern Wolf@pawb.social
          link
          fedilink
          arrow-up
          1
          ·
          1 year ago

          Quite frankly no one should be using captchas at all. They are mostly pointless, and AI’s have reached the point of being able to solve them. It’s mostly just a gratis thing at this point… The illusion of trust and safety, probably for both users and providers.

      • Michael Murphy (S76)@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        1 year ago

        not using tracking scripts

        System76 uses Plausible, not Google Analytics. Google is only required for Captcha.

        hCAPTCHA

        This is not any better from a privacy perspective.

        https://puri.sm/

        Purism also uses the same captcha services… Honestly, all of your comments here sound like a poor attempt at Purism promotion. You’ve been repeatedly spreading misinformation while simultaneously promoting Purism in each comment here.

      • Southern Wolf@pawb.social
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Considering Purism is running a pump and dump scam with their phone, I wouldn’t grace them or their website with a single cent. There are worse things than a potential privacy issue…

    • ReversalHatchery@beehaw.org
      link
      fedilink
      arrow-up
      4
      ·
      1 year ago

      First of all, they could just have been honest at tell that.

      Second, you do not try ublock, you use ublock. That’s a minimum of you care about privacy. It does not break anything.
      What you try is umatrix.

      • Southern Wolf@pawb.social
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Could be it’s a requirements for their payment processor, and details like that aren’t something you talk openly about freely.

        Also, you will have sites that u lock will break beyond repair, so try is the correct word. I know this well from using Brave, which is even less than uBlock does, and even then some sites are still broken and requires the shields turned off. Just an unfortunate reality with today’s web.

  • Fabrik872@apollo.town
    link
    fedilink
    English
    arrow-up
    23
    ·
    1 year ago

    Their focus is i think in making pop os for hardware from clevo or someone similar or themselves in case of desktops not making websites. I mean i agree that this suck because this websites represents them. I am just saying that maybe they dont even have its own web developers for the site and the company that handles their eshop probably dont offer alternative capcha method and for them to change that they need to change the conpany that handles eshop or make their own. Both are very complicated and expensive solutions i think.

  • Raphaël A. Costeau@lemmy.ml
    link
    fedilink
    English
    arrow-up
    20
    ·
    edit-2
    25 days ago

    You see, even Mozilla uses reCaptcha and other Google APIs. Companies that “fight for freedom” will only do the minimal. Still, I think is worthy to send an email do System 76 with this reclamation.

    CC BY-NC-SA 4.0

  • const_void@lemmy.ml
    link
    fedilink
    arrow-up
    16
    ·
    1 year ago

    You’re worried about Google trackers on their website but you were gonna potentially buy a Lenovo Thinkpad? Lololol

  • spacemanspiffy@lemmy.world
    link
    fedilink
    English
    arrow-up
    14
    ·
    1 year ago

    I agree with you. Purism had this same problem at one point I believe - turns out that the Wordpress plugins that they used for their site came bundled with Google crap.

    It’s possible this wasn’t an intentional choice by anyone at S76, but instead just spyware bundled with other components.

    Both businesses should know to evaluate their dependencies for these sorts of things, but mistakes do happen. It’s good that concerned community members exist to call them out, even if they have no plans to change it.

  • cmnybo@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    13
    ·
    1 year ago

    I wasn’t very impressed with their customer service. They wouldn’t sell me a new battery when mine died. Now I’m stuck with an otherwise perfectly good laptop that now has to be plugged in all the time.

      • cmnybo@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        I’m rather tempted to get a Framework 16, although I’m still waiting for more information about it to be released.
        I just wish they would come out with a different keyboard. I don’t like the small arrow keys and the lack of dedicated home and end keys.

        • Michael Murphy (S76)@lemmy.world
          link
          fedilink
          English
          arrow-up
          11
          ·
          edit-2
          1 year ago

          Not sure how that would be the fault of customer service. There were a lot of component shortages during the pandemic. Suppliers often discontinued components in the middle of production because they couldn’t source the chips required. Batteries also require chips to control their charging thresholds and voltages.

  • Pig@lemmy.world
    link
    fedilink
    arrow-up
    7
    ·
    edit-2
    1 year ago

    I agree with your stance, and I can also acknowledge what other people are saying, about not being able to find companies anymore, that aren’t willing to sell your information to multi-billion dollar targeted-ad companies. I would do what a couple other people, in this post, mentioned. Buy a used laptop/desktop, in cash, that supports coreboot. To my knowledge, anything past an i5 can’t fully remove all of the IME blobs, anyways. If you want something for gaming, and don’t want to support/contribute to the funneling of personal data, I would build a desktop from parts that work well with Linux, from a store like MicroCenter.

  • TropicalDingdong@lemmy.world
    link
    fedilink
    arrow-up
    5
    ·
    1 year ago

    I was very disappointed in my Serval.

    It never got a firmware update that it sorely needed. Maybe 1 hr battery life?

    I personally think they should just focus on Pop_OS! .

    I’m much happier with the laptop I ran out and grabbed from a big box store to replace the 2k+ one I bought from system 76.

    • Michael Murphy (S76)@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      1 year ago

      I personally think they should just focus on Pop_OS! .

      Pop!_OS does not generate any revenue. It would cease to exist without System76 hardware sales.

      • Kilgore Trout@feddit.it
        link
        fedilink
        arrow-up
        5
        ·
        1 year ago

        It must be hard to address all the people who don’t know what they are talking about. My next laptop will come no sooner than 10 years in the future, but you keep up the good work!