Office: Alternatives since Collabora introduced nagware with possibility to track users

Hi @erfus ,

I never used Collabora since the statment that it is a development version scared me off. This is beta testing par excellence.
Since Nextcloud Office uses CODE too there is no difference.

Since mobile editing is important for me too I used this hack for OnlyOffice and I am happy with it.

Both companies introduced limitations and I am not happy with it either but at least I did not see anything like sideloading or home-calling in OnlyOffice. After reading this thread this gives OnlyOffice a big plus.

Thank you very much @mmeeks . For the completeness once again the ticket posted above.

1 Like

We are talking about two diffrent issues here. This issue you linked is mainly about the fact that there is a welcome screen at all, regardless of whether it is loaded locally or not. This might be annoying to some but at least to me itā€™s not a deal breaker. What is a deal breaker though, is that uBlock Origin still shows me a connection to rating.collabora.com when I open documents in Nextcloud Office. This has to go away completely imho, at least in the ā€œbuilt-inā€ server. The Docker container provided by Collabora is of course another story but I would recommend them to remove it there as wellā€¦

Collabora Online - Built-in CODE Server 21.11.402
Nextcloud Office 6.0.0

@bb77
Hi. @erfus posted this screenshot. Because of the names of the files i thought the ā€œwelcome pageā€ is loaded also from rating.collaboraonline.com .
Can you @bb77 post again your screenshot (network analysis) and the issue or link?

Iā€™m not sure from where the welcome screen is loaded. It didnā€™t appear since I upgraded to NC24 on my test instanceā€¦ But Iā€™m still seeing this:

Bildschirmfoto vom 2022-05-03 16-04-35

You can use Browser Developer Options (F12) and then Network Analysis. Can you find HTTP-requests from sites not from your Nextcloud?

Here you goā€¦

Bildschirmfoto vom 2022-05-03 16-25-51

EDIT:
I totally forgot that I blocked it in Pi-Hole when this discussion startedā€¦ Thatā€™s probably the reason why it shows 0 bytes data transfer and why the welcome screen doesnā€™t appear for me anymoreā€¦ :wink: Of course blocking it with browser add-ons or via local DNS is not a good solution at allā€¦

1 Like

Thank you for the screenshot.
Yes i think it makes not sense to use ā€œupdatecheck.htmlā€ from rating.collaboraonline.com in the Nextcloud-version of Collabora Online.

For me that would be a NO-GO too. It is good that there are two options for Office in nextcloud so I hope that this issue will be solved too.

Similare to the Passwords App where the server fetches it. (Link unlinked)
https ://help.nextcloud.com/t/passwords-app-uses-third-party-connection-raw-githubusercontent-com-is-that-really-necessary/95788
Luckily, the dev changed that for good.

Which has other down sidesā€¦ :wink: But yes, choice is of course always a good thing.

@bb77

I wrote a new comment in the issue. Maybe someone must open another issue for ā€œUpdateCheckā€ Collabora Online in Nextcloud. It cannot be that Collabora Online in Nextcloud has to determine on Collaboraā€™s servers whether the version is up to date or not. Nextcloud has its own appstore for this purpose.

1 Like

The actual reason for the check is more likely to determine whether it should load the welcome screen or not. :wink:

In the issue @mmeeks has opened some new issues.

1 Like

This sounds good. Which then of course should be the default for the Nextcloud app. Because as you pointed out earlier, we donā€™t need a separate update check there.

1 Like

There is a relevant welcome message compile-time option. How hard would it be to maintain a fork where the only change is to disable the welcome message? It could be a very lightweight fork that keeps abreast of upstream CollaboraOnline/online code.

The difficult part of the fork would be devops (build, test, packaging releases) and re-branding (assuming that is necessary). The build looks rather complex.

To any would-be fork enthusiasts: I think we should consider that if Collabora is committed to gathering usage data by ā€œphoning homeā€ (and letā€™s be honest: itā€™s their business and their call to do so, lots of FOSS phones home, and phoning home from FOSS is generally done in good faith), that some kind of phone-home will always be included in the upstream code. Hereā€™s another example of what Iā€™d call a ā€œgood-faith phone homeā€ (thereā€™s a good reason for it and the maintainers seem trustworthy). The difference with that example is the option is available at runtime.

For what itā€™s worth, I decided to DNS-block rating.collaboraonline.com.


@mmeeks : Thank you for engaging so thoroughly with the community on this! I sincerely appreciate your time. Thank you for suggesting workarounds and being so kind and patient with us. But I feel like you are carefully side-stepping a theme that just keeps on surfacing: nobody wants the welcome message. Am I right? Iā€™m curious if you would ask or have asked your users: ā€œhey yā€™all: about our welcome messageā€¦ thumbs up or down?ā€. All the user feedback Iā€™m seeing in this thread and on the CollaboraOnline/online#4489 github issue is that the welcome message is not wanted. If the survey were to have two questions, perhaps the second is ā€œwould you like a runtime option to disable the welcome message?ā€

2 Likes

@meonkeys we continue to work to improve things here - this is not the final state, and Iā€™ve been giving thought also to how to help the corner-case of people who reset their cookies continually and so get a lot of welcoming. As I outlined, we need the welcome dialog to encourage corporate users to get support & services - and yes it works. As many pointed out for smaller / home-user environments it is useful to get people aware of and involved in the community too - but, I hear that some donā€™t want it - and some asked to restore the per-user / connection limit instead: which was better for their use-case. I wonder if that solves the issue: we could (and Iā€™d need to talk to my releng) create two builds: one that has the welcome / get-involved (which is still by far my preference), and another that you can configure it off - but which restores the old connection/document limit. I wonder whom that pair would not address. Then again - if we could get transaction costs down enough - several people kindly suggested theyā€™d be happy to contribute a small sum to help fund the work & get a different outcome. Anyhow - the focus for now is to make this less intrusive and address the concerns about remote server use.

1 Like

The diffrence is that this adds functionality that otherwise would be hard if not impossible to implement. Phoning home just for statistics, or to determine whether it should load a nag screen or not is not a good reason from a users perspective. And since everything is encrypted we donā€™t really know what data is sent. And good faith is a nice thing in theory, but we all know where that can lead toā€¦ :wink: and this is probably why many of us want to self-host our data in the first place.

1 Like

In my eyes reasonable low connection limit address your goal much better than a nag screen for each visitor.

I followed the discussion on Github but I disagree with your conclusion. If I would be a manager my customers hitting a message ā€œthis connection was blocked as you cross the usage limit of this personal/DEV software packageā€ would be pretty good motivation to by professional package. and I think maintaining two different versions only for this reason is waste of time. If your only valid options are to use the one or another use a switch: there is welcome / get-involved without connection limit or connection limit kicks in once you disable welcome screen using some config parameterā€¦ this way you ā€œprotectā€ the free CODE using only one packageā€¦

4 Likes

I hope itā€™s OK to revive this topic. It would be really useful to have an update on what happened in the last year. I have the nag and donā€™t know how to remove it. I am willing to donate towards solutions.

Background about me: Iā€™m a regular small-scale user of NextCloud for personal projects or self-employed work. I love it because I wish to be free. Free to keep my data private, free of companies tracking me (meaning version usage cookies in this case), free to configure the software to run how I want and free of intrusive nagsšŸ˜ƒ. I realise that software doesnā€™t write itself and therefore canā€™t be free of cost for all.

The suggestion quoted above makes a lot sense to me. Did anything happen?

  • The current nag based on cookies (which I routinely delete) and also ā€œphoning homeā€ (or maybe thatā€™s now fixed?) breaks my idea of freedom. AFAICS I canā€™t actually buy an upgrade to remove the Collabora nag as Iā€™m not an enterprise, so I donā€™t really get the advantage of nagging me.

  • The connection limit on the other hand seems to directly achieve the objective of persuading Enterprises that they follow the license conditions and pay up. Maybe we donā€™t even need two different versions as it could just be a config option. In terms of bringing awareness of the Collabora brand, perhaps it could be displayed on the login screen alongside the NextCloud branding in cases where Office is installed??

If Collabora is not going to be change, then I would favour the idea of marking the Office app and any similar ones in the store to indicate the limitations in freedom (similar to what FDroid does). Or perhaps the NextCloud community could maintain a Collabora build with the nag being optional? Is anyone else interested in these directions?

The current ā€œnagā€ screen, at least if you are using the official Docker container, is more of a ā€œWhatā€™s newā€ and ā€œhow to contributeā€ screen. And no, it doesnā€™t phone home anymore.