Earlier quoted context omitted.
Disagree. Google Analytics is a network of companies that has agreed to privately collection information about users without their permission or even knowledge. It is malware that should not be included in Homebrew. The only ethical decision we can make as developers is not to use it.
I'm always amused by the way some people try to extend the definition of malware beyond its scope. This isn't malware. It's just anonymous usage tracking. If you don't like it you can turn it off. I hope you don't use a smartphone because the amount of intrinsic "malware" you must be subjected to must be unbearable. "Malware" is an umbrella term used to refer to a variety of forms of hostile or intrusive software, in…
Homebrew now sends usage information to Google Analytics
81–90 of 329 posts
Re: Homebrew now sends usage information to Google Analytics
#82Earlier quoted context omitted.
Collecting telemetry is reasonably, but it seems inappropriate for Google to get a copy and to be able to identify which of their users installed a particular piece of software from the IP address. So yes. Running their own server would be much preferable.
For Homebrew: > The Google Analytics anonymous IP setting is enabled i.e. 1 ( https://developers.google.com/analytics/devguides/collection... )
Re: Homebrew now sends usage information to Google Analytics
#83Earlier quoted context omitted.
"oconnore" is a perfectly valid unique identifier on HackerNews that doesn't tie to anything about you if you don't have your email address in your profile. This is no different.
The difference is, it's a choice to post on a public website. homebrew is a package management tool, there is no expectation that it will send information about you to Google.
This. The reasons they articulate for suddenly deciding on performing this data collection, and for doing it via GA are laughable. I am sufficiently annoyed at this because of the generation of yet another outbound data stream from my system, but the fact that in all likelihood the project will do nothing with this data really annoys me. There is zero need for this in a package system.
Re: Homebrew now sends usage information to Google Analytics
#84Earlier quoted context omitted.
That's probably true, but then no one would opt-in.
...which is very telling.
Simple solution: Charge people for using Homebrew who don't want to send analytics in, fund Homebrew development with those funds. Otherwise, its an external cost being foisted on the volunteers by developers who want privacy at the cost of additional volunteer time.
EDIT: The tone of this thread is the exact problem with open source projects and participation. "I want a say, but I'm not willing to contribute in any way except use your tool you're providing for free." Sad, but expected.
Re: Homebrew now sends usage information to Google Analytics
#85Earlier quoted context omitted.
Disagree. Google Analytics is a network of companies that has agreed to privately collection information about users without their permission or even knowledge. It is malware that should not be included in Homebrew. The only ethical decision we can make as developers is not to use it.
I'm always amused by the way some people try to extend the definition of malware beyond its scope. This isn't malware. It's just anonymous usage tracking. If you don't like it you can turn it off. I hope you don't use a smartphone because the amount of intrinsic "malware" you must be subjected to must be unbearable. "Malware" is an umbrella term used to refer to a variety of forms of hostile or intrusive software, in…
Malware
-------
- Any software that actively attempts to do any of the following:
- Do harm to the system, applications or data
- Deliberately weakens system security
- By changing system or user security settings
- Contains or installs backdoors
- Downloads updates as executables
- Use executables to wrap otherwise readable data
- Expects higher or more privileges than is needed by it's function.
- Circumvent the wishes or intention of the user
- Makes it self the default application for file-types that already have an application assigned to them
- Inserts itself into other applications against the users expectation (eg. as a plugin)
- Uses the privileges of other applications to circumvent system policy
- Hide its activity from inspection
- Anti-debugging, and other rootkit like behaviour
- Use "dark patterns" to trick the user into performing or agreeing to some action
- Installs toolbars, etc.
- Compromise the privacy of the user
- Phones home, access data irrelevant to it's function
- Resists removalRe: Homebrew now sends usage information to Google Analytics
#86Earlier quoted context omitted.
Totally agree. I don't feel too comfortable bout google knowing everything about me... Should be opt in.
Did you read the link? Your actions cannot be tied specifically to you.
Re: Homebrew now sends usage information to Google Analytics
#87Earlier quoted context omitted.
You may also want to "rm ~/.homebrew_analytics_user_uuid"
You could really screw with their statistics by regularly changing the contents of that file.
We currently don’t have any overview of our userbase; we don’t even know how many people use Homebrew. More importantly, Homebrew currently only bottles the default options but we know some people use some options that cause the formulae to build from source. If tomorrow we see that e.g. `brew install foo --with-bar` is run by hundreds of people everyday we could start bottling it and saving time to everyone. But right now that’s completely dark; the only insights we have about the usage is people opening issues/PRs.
Re: Homebrew now sends usage information to Google Analytics
#88Earlier quoted context omitted.
> no personal info > Just your universally unique id ...
> > Just your universally unique id How is a Homebrew UUID personal info?
Maybe this is sufficiently private, maybe not. I'm not a security expert.
Maybe GA's fingerprinting heuristics are advanced enough to know that because user 1034324234 installed spacemacs at 4:01 and I visited the spacemacs documentation at 4:01 that there's a decent chance I'm user 1034324234.
Decent enough to see if the pattern happens again. After a few rounds of this, it's close enough to serve me ads based on user 1034324234's install patterns.
:shrug: doesn't sound crazy to me.
Re: Homebrew now sends usage information to Google Analytics
#89Earlier quoted context omitted.
For Homebrew: > The Google Analytics anonymous IP setting is enabled i.e. 1 ( https://developers.google.com/analytics/devguides/collection... )
It's worth noting that AIP's functionality requires you to trust Google -- the data is received by them, but their design specifies that they mask it before it's processed or stored.
Re: Homebrew now sends usage information to Google Analytics
#90Earlier quoted context omitted.
Is an alert displayed to the user the first time it tries to send info to Google? If not, that is far from "transparent". It's good that they tell you how to opt out on the website, but I can't remember the last time I went to the website. Probably when I first installed Homebrew on this Mac.
Get littlesnitch on Mac and you won't need to rely on third parties alerting about outgoing connections, although I recon the when we're talking about something like homebrew it's not easy to vet every single outgoing connection. Still littlesnitch is really awesome for the privacy conscious users.
Also, Microsoft really needs to clean up their domain usage, because it takes 999 permission rules to run Office.