RAPPOR implementation

chrome/browser/prefs/pref_metrics_service.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/prefs/pref_metrics_service.h"
 
 #include "base/bind.h"
 #include "base/command_line.h"
 #include "base/metrics/histogram.h"
 #include "base/prefs/pref_registry_simple.h"
 #include "base/prefs/pref_service.h"
 #include "base/strings/string_number_conversions.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/browser_shutdown.h"
 #include "chrome/browser/prefs/pref_service_syncable.h"
 #include "chrome/browser/prefs/session_startup_pref.h"
 #include "chrome/browser/prefs/synced_pref_change_registrar.h"
 #include "chrome/browser/profiles/incognito_helpers.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/search_engines/template_url_prepopulate_data.h"
 #include "chrome/browser/ui/tabs/pinned_tab_codec.h"
 #include "chrome/common/chrome_switches.h"
 #include "chrome/common/pref_names.h"
 #include "components/browser_context_keyed_service/browser_context_dependency_manager.h"
+#include "components/rappor/rappor_service.h"
 #include "crypto/hmac.h"
 #include "net/base/registry_controlled_domains/registry_controlled_domain.h"
 
 namespace {
 
 const int kSessionStartupPrefValueMax = SessionStartupPref::kPrefValueMax;
 
+const rappor::RapporParameters kHomePageRapporParameters = {
+    "Settings.HomePage", 16 /* Bloom filter size bytes */,

[Ilya Sherman, 2014/01/10 11:00:32]

Optional nit: One arg per line might be a little clearer.

[Steven Holte, 2014/01/14 00:47:54]

Done.

+    4 /* Bloom filter hash count */,
+    rappor::PROBABILITY_75 /* Fake data probability */,
+    rappor::PROBABILITY_50 /* Fake one probability */,
+    rappor::PROBABILITY_75 /* One coin probability */,
+    rappor::PROBABILITY_50 /* Zero coin probability */

[Ilya Sherman, 2014/01/10 11:00:32]

This is a lot of manual configuration.  Do all of these knobs really need to be
exposed, or can we just provide reasonable defaults for clients to use?

[Steven Holte, 2014/01/14 00:47:54]

We should have defaults for this eventually, but we don't have guidelines for
setting these yet.  I think that's something that will be easy to add as we add
additional metrics.

[Alexei Svitkine (slow), 2014/01/22 22:13:28]

This is one area that still concerns me. If the API is open to allow users to
specify their own values for these parameters, then I'm afraid that this may
compromise the guarnatees that the system is supposed to provide.

Specifically, could one come up with a set of values that would defeat the
design of the system that makes it privacy preserving? If so, then that's a bad
whole that I think we shouldn't expose by the API. Also, it's not just
mal-intent that I'm worried here - simply exposing this much complexity to
people adding metrics allows people to pick bad values by virtue of not
understanding the implications, etc.

I would strongly suggest defining "known-good" parameters in the component
itself and just having a set of enum values that's exposed through the API,
where each enum value maps to a set of parameters.

Separately, I'd also like to see some guidance provided from Ulfar for what
"acceptable" parameter ranges are and having strong validation to enforce this.

+};
+
 }  // namespace
 
 PrefMetricsService::PrefMetricsService(Profile* profile)
     : profile_(profile),
       prefs_(profile_->GetPrefs()),
       local_state_(g_browser_process->local_state()),
       weak_factory_(this) {
   RecordLaunchPrefs();
 
   PrefServiceSyncable* prefs = PrefServiceSyncable::FromProfile(profile_);
@@ skipping 29 matching lines @@
   // consist of a search box that sends to known TLD+1 Y) and false positives
   // (pages that share a TLD+1 with a known engine but aren't actually search
   // pages, e.g. plus.google.com).
   if (!home_page_is_ntp) {
     GURL homepage_url(prefs_->GetString(prefs::kHomePage));
     if (homepage_url.is_valid()) {
       UMA_HISTOGRAM_ENUMERATION(
           "Settings.HomePageEngineType",
           TemplateURLPrepopulateData::GetEngineType(homepage_url),
           SEARCH_ENGINE_MAX);
+      g_browser_process->rappor_service()->RecordUrl(
+          kHomePageRapporParameters, homepage_url);
     }
   }
 
   int restore_on_startup = prefs_->GetInteger(prefs::kRestoreOnStartup);
   UMA_HISTOGRAM_ENUMERATION("Settings.StartupPageLoadSettings",
                             restore_on_startup, kSessionStartupPrefValueMax);
   if (restore_on_startup == SessionStartupPref::kPrefValueURLs) {
     const base::ListValue* url_list =
         prefs_->GetList(prefs::kURLsToRestoreOnStartup);
     UMA_HISTOGRAM_CUSTOM_COUNTS("Settings.StartupPageLoadURLs",
@@ skipping 124 matching lines @@
 }
 
 bool PrefMetricsService::Factory::ServiceIsNULLWhileTesting() const {
   return false;
 }
 
 content::BrowserContext* PrefMetricsService::Factory::GetBrowserContextToUse(
     content::BrowserContext* context) const {
   return chrome::GetBrowserContextRedirectedInIncognito(context);
 }