Kite telemetry code in Sublime package SideBarEnhancements
forum.sublimetext.com
Kite telemetry code in Sublime package SideBarEnhancements
1–10 of 120 posts
Re: Kite telemetry code in Sublime package SideBarEnhancements
#2they're also obscuring who this log data is being sent to by just posting JSON to an ec2 IP address (52.52.168.91). The server tries hard to not let you know it belongs to Kite. You know someone is ashamed of what they're doing when they take efforts to mask who's doing it.
But you can see kite's own installer uses the same ip address for its telemetry: https://github.com/kiteco/kite-installer/blob/master/ext/tel...
Re: Kite telemetry code in Sublime package SideBarEnhancements
#3The best course of action in such cases is to vote with your feet.
Re: Kite telemetry code in Sublime package SideBarEnhancements
#4/u/michael0x2a on Reddit put together a nice tl;dr[1] of the story arc for those that don't want to dig through the thread.
tl;dr for that is basically:
Kite has been collecting "anonymous" data from sublime users with the SideBarEnhancements plugin installed. This has been happening for atleast a year and the data collected included activeNonBundledPackageNames which is basically a list of packages installed via Package Control.
It seems they were intentionally unclear about who the data was sent to and did not think to remove it from the plugin after the Atom Minimap incedent because:
> the truth is we didn't remember [2]
[1] https://www.reddit.com/r/programming/comments/6qwtfz/kite_in...
[2] https://forum.sublimetext.com/t/rfc-default-package-control-...
Re: Kite telemetry code in Sublime package SideBarEnhancements
#5/sarcasm Really looking forward to reading the Kite blog post this time around: "Staying Open (Still): Kite Responds To the SideBarEnhancements Issue." /sarcasm
Sorry Kite - fool us once, shame on you. Fool us twice, shame on us. There's now a 0% chance of my ever using your products or services.
Re: Kite telemetry code in Sublime package SideBarEnhancements
#6/sarcasm Really looking forward to reading the Kite blog post this time around: "Staying Open (Still): Kite Responds To the SideBarEnhancements Issue." /sarcasm Sorry Kite - fool us once, shame on you. Fool us twice, shame on us. There's now a 0% chance of my ever using your products or services.
the sad thing is that this has been out for 9 months. If Kite was looking for stats to help inform their product development they already got all the data they need.
Re: Kite telemetry code in Sublime package SideBarEnhancements
#7/u/michael0x2a on Reddit put together a nice tl;dr[1] of the story arc for those that don't want to dig through the thread. tl;dr for that is basically: Kite has been collecting "anonymous" data from sublime users with the SideBarEnhancements plugin installed. This has been happening for atleast a year and the data collected included activeNonBundledPackageNames which is basically a list of packages installed via Pac…
Does kite own SideBarEnhancements? How did this code get past a PR?
Re: Kite telemetry code in Sublime package SideBarEnhancements
#8they're also obscuring who this log data is being sent to by just posting JSON to an ec2 IP address (52.52.168.91). The server tries hard to not let you know it belongs to Kite. You know someone is ashamed of what they're doing when they take efforts to mask who's doing it. But you can see kite's own installer uses the same ip address for its telemetry: https://github.com/kiteco/kite-installer/blob/master/ext/tel...
It might be worth searching every release in the package_control_repo for this IP address...
https://github.com/wbond/package_control_channel/tree/master...
Re: Kite telemetry code in Sublime package SideBarEnhancements
#9I modified the Stats.py file in the SideBarEnhancements.sublime-package on my computer to remove the line that references this IP address. I also made the file read-only so it won't get updated. Does anyone know if that will take care of the issue on my computer for now?
Re: Kite telemetry code in Sublime package SideBarEnhancements
#10/u/michael0x2a on Reddit put together a nice tl;dr[1] of the story arc for those that don't want to dig through the thread. tl;dr for that is basically: Kite has been collecting "anonymous" data from sublime users with the SideBarEnhancements plugin installed. This has been happening for atleast a year and the data collected included activeNonBundledPackageNames which is basically a list of packages installed via Pac…
Does kite own SideBarEnhancements? How did this code get past a PR?
They apparently paid the author (Tito) to add it in. Originally he had pulled all of his packages from the default channel because he was unhappy that we require semver for all new packages (to allow newer features to work). After a bunch of users complained, he added SideBarEnhancements back (his most popular package), but apparently at some point later Kite paid him to add tracking code to it.