Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Warp, a Rust-based terminal

warp.dev

Post reply on HN
Print view View original

611–620 of 757 posts

Re: Show HN: Warp, a Rust-based terminal

#611

Post by NateEag »

sorokod wrote: post #140
alokedesai wrote: post #126

Earlier quoted context omitted.

That's an important callout! By console output, we really mean output from the pseudoterminal, which includes command input and output printed to the terminal. We don't store any content of _any_ part of a command that's executed in Warp.

... and never will?

Why even ask?

Founders don't really have much control over what the tools they create wind up being used for.

Assume that some people will use any tool you encounter for the worst thing it can possibly do.

If the tool has significant potential to do things that bother you, don't use it.

Re: Show HN: Warp, a Rust-based terminal

#612

Post by smt88 »

_tom_ wrote: post #602
ovao wrote: post #583

Earlier quoted context omitted.

As much as I can appreciate the community’s reaction to your approach of default collection of telemetry, I can also equally appreciate you and the rest of the team sucking it up and accepting the feedback. Thanks for that, and I’m personally interested to see where you’re able to take Warp. I think there’s something potentially pretty compelling here. My advice here would be to simply make telemetry opt-in during th…

If the code is there, it is potentially exploitable. So, opt out is nowhere near good enough. If it can send to remote hosts, this can be abused. This capability should not be there, at all. Look at the recent logging fiasco for an example.

> If it can send to remote hosts, this can be abused.

A useful terminal cannot be prevented from contacting remote hosts.

Re: Show HN: Warp, a Rust-based terminal

#613

Post by ajxs »

westoncb wrote: post #580
zachlloyd wrote: post #570

Earlier quoted context omitted.

Hi - as the poster and founder I again completely get the concern. We should make it even more transparent what we collect. You can see it here: https://docs.warp.dev/getting-started/privacy#exhaustive-tel... Re: big business, we're still pretty small, but it's true that we are trying to build a business around the command-line. I get that's controversial and it's not something that exists and that the terminal is a…

Hey Zach, while I think your post is well-intentioned, the contemporary default level of trust around tech companies and data privacy is just very low. As a new entrant to the field, you inherit the default valuation—people have no other info to go off of. Given that, it's probably the case that the only options are to either be fully open source or to make a fully offline mode an option. In any case, I think the con…

> ...the contemporary default level of trust around tech companies and data privacy is just very low...

It's not just that the level of trust is very low. I shouldn't need to place any trust in the developers of my terminal at all. If I can't know for a fact that it's not acting against my interests, then I'll pass. I already have such a big selection of fully open-source terminals available. Why would I even consider taking any king of risk with this one?

Re: Show HN: Warp, a Rust-based terminal

#614

Post by chillfox »

zhengt wrote: post #318
db48x wrote: post #50

Earlier quoted context omitted.

Yea, I would never use a terminal that does any of that. If you want logging and crash reports, use Breakpad or something similar to send the crash report after a crash. No need to have telemetry reports going all the time.

In addition to crashes, we also want to know things like: which features people are using so we can invest more in them, how much people are using the app so we know if we're doing in a good job. Totally understand if you're not comfortable with that though! It will be removed when Warp is out of the beta test.

I hate telemetry driven development.

It just results in loosing infrequently used but important features. First it gets moved from a button to a menu, then to a sub-menu and eventually removed.

Re: Show HN: Warp, a Rust-based terminal

#615

Post by 1123581321 »

ajxs wrote: post #613
westoncb wrote: post #580

Earlier quoted context omitted.

Hey Zach, while I think your post is well-intentioned, the contemporary default level of trust around tech companies and data privacy is just very low. As a new entrant to the field, you inherit the default valuation—people have no other info to go off of. Given that, it's probably the case that the only options are to either be fully open source or to make a fully offline mode an option. In any case, I think the con…

> ...the contemporary default level of trust around tech companies and data privacy is just very low... It's not just that the level of trust is very low. I shouldn't need to place any trust in the developers of my terminal at all. If I can't know for a fact that it's not acting against my interests, then I'll pass. I already have such a big selection of fully open-source terminals available. Why would I even conside…

I can’t speak for you, but generally people at least consider this tradeoff because of the additional utility of the third party tool. Ideally all these features would exist in the system terminal, but that hasn’t happened, and it possibly won’t ever.

Re: Show HN: Warp, a Rust-based terminal

#616

Post by xyst »

gerbilly wrote: post #133

It looks nice but I'd never use a shell that phone's home. Period. I mean the CLI has been one of the last parts of my system that I really still trust is working on my behalf only. This product made me rethink that assumption. As for capturing the output from a command line on the mac (and also on linux IIRC) just use pbcopy/pbpaste. My opinion: It's not worth giving your privacy away for features like this.

same - I'll stick with iTerm and zsh. It's definitely interesting though. Probably a security nightmare though. I noticed the one feature to share terminal output via a third party link. I can imagine there being a set of people accidentally leaking critical information via this feature (ie, passwords, private keys, system settings).

Re: Show HN: Warp, a Rust-based terminal

#618

Post by rschachte »

orastor wrote: post #20

Wanted to give it a shot but got disappointed when I launched it and the following happened: - Outgoing request to googleapis.com - Outgoing request to segment.io - Outgoing request to sentry.io - Requires sign up (only via Github, mind you) I understand the first request is probably to get some dynamic configuration, even though I'd rather my terminal ship with static configuration. But then you have segment and sen…

UI looks great to me too. Thanks for the comment, I'll skip on downloading this though because of the outgoing requests

Re: Show HN: Warp, a Rust-based terminal

#619

Post by 1123581321 »

_tom_ wrote: post #608
_jal wrote: post #453

Earlier quoted context omitted.

I can't imagine using a Mac without Little Snitch: https://obdev.at/products/littlesnitch Among other things, it is disturbing how chatty a lot of things are. (Did you know Apple Mail keeps track of which account you email different people with and wants to send that to configuration.apple.com, even if you have carefully disabled everything Icloud related?) There's a similar tool for Linux, but I usually keep a netwo…

Closed source, monitors everything on the machine. How much do you trust little snitch? And then asking to keep a copy of your drivers license for ten years is a complete non starter. (Yes, that's in their privacy policy)

There is a section about being required by the EU to determine location for VAT collection purposes. If their payment processor can’t determine your location sufficiently, then they have to collect data identifying your location and store it for tax/proof purposes. That’s something they don’t want to ever have to do, obviously.

Here’s a link to the policy: https://www.obdev.at/privacy/index.html

Re: Show HN: Warp, a Rust-based terminal

#620

Post by xwowsersx »

Having to sign on/sign up with Github and agreeing to send usage data and other telemetry is just a nonstarter for me, as I imagine it is for many other developers. I do basically everything in my terminal, there's just no way I can agree to beaming any of that back up to some server and essentially trusting there's no fuckery going on.

Looks like a cute terminal though.

Post reply on HN