Live data from Hacker News

Homebrew now sends usage information to Google Analytics

github.com

51–60 of 329 posts

Re: Homebrew now sends usage information to Google Analytics

#51

Yet another reason to ditch the antiquated Homebrew, and switch to the cross platform Nix: http://nixos.org/nix https://github.com/NixOS/nixpkgs https://blog.errright.com/switching-from-homebrew-to-nix/

Remember when everyone switched to Homebrew because Fink/macports were "antiquated", a.k.a. not written in Ruby?

It was nice back then. Packages didn't install themselves in /usr/local.

Re: Homebrew now sends usage information to Google Analytics

#52

Earlier quoted context omitted.

> no personal info > Just your universally unique id ...

"oconnore" is a perfectly valid unique identifier on HackerNews that doesn't tie to anything about you if you don't have your email address in your profile. This is no different.

The difference is, it's a choice to post on a public website. homebrew is a package management tool, there is no expectation that it will send information about you to Google.

Re: Homebrew now sends usage information to Google Analytics

#54
post #28

Set HOMEBREW_NO_ANALYTICS=1 to opt out. The right thing to do would be to make it opt in, not opt out. (Which would not be without precedent. Debian's popcon is opt-in.)

Where's your reasoning? Homebrew gave theirs. Keep in mind that no personal info is ever sent. Just a random UUID.

I block Google Analytics in my web browser, too...

Re: Homebrew now sends usage information to Google Analytics

#55
post #6

Set HOMEBREW_NO_ANALYTICS=1 to opt out. The right thing to do would be to make it opt in, not opt out. (Which would not be without precedent. Debian's popcon is opt-in.)

Disagree. Google Analytics is a network of companies that has agreed to privately collection information about users without their permission or even knowledge. It is malware that should not be included in Homebrew. The only ethical decision we can make as developers is not to use it.

I'm always amused by the way some people try to extend the definition of malware beyond its scope. This isn't malware. It's just anonymous usage tracking. If you don't like it you can turn it off. I hope you don't use a smartphone because the amount of intrinsic "malware" you must be subjected to must be unbearable.

"Malware" is an umbrella term used to refer to a variety of forms of hostile or intrusive software, including computer viruses, worms, trojan horses, ransomware, spyware, adware, scareware, and other malicious programs. It can take the form of executable code, scripts, active content, and other software.

Re: Homebrew now sends usage information to Google Analytics

#57

Set HOMEBREW_NO_ANALYTICS=1 to opt out. The right thing to do would be to make it opt in, not opt out. (Which would not be without precedent. Debian's popcon is opt-in.)

Or, you could edit /usr/local/Library/Homebrew/utils/analytics.rb to send Google Analytics garbage (from random UUIDs) until Homebrew makes this feature opt-in.

This is a great idea.

Any rubyists want to provide a patch to do this?

Re: Homebrew now sends usage information to Google Analytics

#58
post #5

The fact that they are transparent about this, that we can opt-out if we want and that they're open source makes me feel more than comfortable sharing anonymous usage information with them. Homebrew has been amazing for me!

Is an alert displayed to the user the first time it tries to send info to Google? If not, that is far from "transparent". It's good that they tell you how to opt out on the website, but I can't remember the last time I went to the website. Probably when I first installed Homebrew on this Mac.

Get littlesnitch on Mac and you won't need to rely on third parties alerting about outgoing connections, although I recon the when we're talking about something like homebrew it's not easy to vet every single outgoing connection.

Still littlesnitch is really awesome for the privacy conscious users.

Re: Homebrew now sends usage information to Google Analytics

#59
post #23

Earlier quoted context omitted.

What is the mechanism in which Homebrew inserts itself into every shell session anyway? I had expected it to be loaded somewhere in some shell initialization script, such as .bashrc or .bash_profile, but I couldn't find anything.

It doesn't — by default, Homebrew lives in /usr/local/bin/, which is already in the default $PATH on OS X.

But then, by which mechanism does Homebrew notify GA that I have opened a terminal tab? There is a curl command executed every time, and I see a connection to GA with Little Snitch.

Is there some way to see the caller of a process? htop displays no parent in the tree view.

Re: Homebrew now sends usage information to Google Analytics

#60
post #58

Earlier quoted context omitted.

Is an alert displayed to the user the first time it tries to send info to Google? If not, that is far from "transparent". It's good that they tell you how to opt out on the website, but I can't remember the last time I went to the website. Probably when I first installed Homebrew on this Mac.

Get littlesnitch on Mac and you won't need to rely on third parties alerting about outgoing connections, although I recon the when we're talking about something like homebrew it's not easy to vet every single outgoing connection. Still littlesnitch is really awesome for the privacy conscious users.

For posterity, Homebrew is using curl to talk to Google Analytics. You will have to selectively block curl by destination in Little Snitch (or only allow the various other hosts Homebrew uses).
Post reply on HN