Live data from Hacker News

Homebrew now sends usage information to Google Analytics

github.com

71–80 of 329 posts

Re: Homebrew now sends usage information to Google Analytics

#71

Yet another reason to ditch the antiquated Homebrew, and switch to the cross platform Nix: http://nixos.org/nix https://github.com/NixOS/nixpkgs https://blog.errright.com/switching-from-homebrew-to-nix/

Aren't the majority of Homebrew users on Mac OS X? Does Nix work on Mac OS X?

Don't get me wrong: Homebrew is impressive in how many bad ideas it has implemented in a project that is so exceedingly popular; good marketing and ease of use are amazingly powerful. I thoroughly dislike Homebrew, and sincerely hope people choose not to use it, at all (but especially not on servers).

And, also don't get me wrong: I really like Nix, and I believe it has mostly right decisions across the board. If I had my druthers, Nix would be what our near-term package management future looks like.

But, if we're talking about Mac (and gods I hope there aren't a lot of people using Homebrew on other Operating Systems, particularly Linux, where we have an embarrassment of riches in terms of good, even great, package managers), I suspect recommending pkgsrc would be a better near term solution. It is more mature on OS X, and it has more packages than Nix. And, while it is not as modern as Nix, it is an acceptable package manager on most fronts, and doesn't exhibit Homebrew's alarming lack of foresight on security questions.

http://pkgsrc.org

In short: I like Nix a lot. I dislike Homebrew a lot. So, we're agreed on those points. But, for Mac OS X users looking for a better alternative to Homebrew, pkgsrc seems to be the current best choice (Fink is poorly maintained, macports is slightly better maintained, but pkgsrc is a better package manager).

Re: Homebrew now sends usage information to Google Analytics

#72
post #6

Set HOMEBREW_NO_ANALYTICS=1 to opt out. The right thing to do would be to make it opt in, not opt out. (Which would not be without precedent. Debian's popcon is opt-in.)

Disagree. Google Analytics is a network of companies that has agreed to privately collection information about users without their permission or even knowledge. It is malware that should not be included in Homebrew. The only ethical decision we can make as developers is not to use it.

Does Homebrew's UUID linked with the user's Google Analytics ID in their browser cookies?

Re: Homebrew now sends usage information to Google Analytics

#73
post #29

Earlier quoted context omitted.

Until next month when we might need to set HOMEBREW_NO_PIWIK=1337...

I'd assume "NO_ANALYTICS" would mean "no analytics" not "no google analytics?

Who knows!? This marks quite a change in attitude where the end user is suddenly responsible for staying on top of newly silently introduced opt-out settings. I'm pretty disappointed and feel the amount of trust I've had in the maintainers have dropped considerably. Sneakily sending random HTTP requests to third party analytics services and stuffing my dotfiles with unique identifiers for tracking purposes is not what I expected from a friendly open source project.

This could have been handled much better with some sort of opt-in prompt like the debian installer does for its popcon usage tracker.

Re: Homebrew now sends usage information to Google Analytics

#74

Earlier quoted context omitted.

Would be somehow more ethical if they set up their own piwik instance to collect the same data?

Collecting telemetry is reasonably, but it seems inappropriate for Google to get a copy and to be able to identify which of their users installed a particular piece of software from the IP address. So yes. Running their own server would be much preferable.

For Homebrew:

> The Google Analytics anonymous IP setting is enabled i.e. 1 (https://developers.google.com/analytics/devguides/collection...)

Re: Homebrew now sends usage information to Google Analytics

#76
post #4

Set HOMEBREW_NO_ANALYTICS=1 to opt out. The right thing to do would be to make it opt in, not opt out. (Which would not be without precedent. Debian's popcon is opt-in.)

That's probably true, but then no one would opt-in.

...which is very telling.

Re: Homebrew now sends usage information to Google Analytics

#77
post #9

Earlier quoted context omitted.

Yeah, I'll confess that this is a real deal breaker for me personally .. I'll be having a closer look at ports and maybe fink soon. Maybe after all its time to get off OSX and back to Linux, where these sorts of things happen less frequently ..

If it means that much to you, why not add host file entries to point GA's DNS records at 0.0.0.0 or something else invalid? If you don't trust that either, supplement it with packet filter rules to drop traffic heading to the IP addresses to which those names (currently) resolve. Switching platforms seems like a major overreaction here.

Privacy should be the default.

Re: Homebrew now sends usage information to Google Analytics

#80

Yet another reason to ditch the antiquated Homebrew, and switch to the cross platform Nix: http://nixos.org/nix https://github.com/NixOS/nixpkgs https://blog.errright.com/switching-from-homebrew-to-nix/

Remember when everyone switched to Homebrew because Fink/macports were "antiquated", a.k.a. not written in Ruby? It was nice back then. Packages didn't install themselves in /usr/local.

I remember switching from Fink and Macports because most of the time both of them would break or break something important.
Post reply on HN