3 ms·

Whether it is FOSS doesn't really contribute anything to solve the problem GP mentions though. The default behavior is to nudge the user to upload. One must ass

Whether it is FOSS doesn't really contribute anything to solve the problem GP mentions though. The default behavior is to nudge the user to upload. One must assume this is the part of the design which allows potential monetization one day. Obviously the author may not be keen to point out this giant gap in the security of their design (it is in fact the main feature). Users might not even think about the security risks this could create. From an enterprise security perspective this is indistinguishable from any (malicious) data-exfiltration tool. It should come with a giant warning and better defaults imo.

sirn 7y ago
> The default behavior is to nudge the user to upload. It's not that bad, if you do not provide a filename, by default it asks for confirmation before uploading. It's still easy to upload by accident[1] though, which I know is no-go in some environment. [1]: https://github.com/asciinema/asciinema/issues/316 https://github.com/asciinema/asciinema/issues/316
OskarS 7y ago
> One must assume this is the part of the design which allows potential monetization one day. Oh, heaven's no! Someone might at some point try to make money from a thing they made?! From their own labor?! How awful! Seriously: it's a stupendous tool and great service, provided free of charge and totally open source. Must we complain about the fact that they try to nudge you towards their tracking-free website, so you can see the tiny "Sponsored by Brightbox" rectangle in the footer, so that the project might yield some tiny financial return (though almost certainly not anywhere close to development costs)? It seems to me that they've done absolutely everything right except possibly live up to the standard that apparently all open source tools should be developed by starving ascetic monks. Come on.

sirn 7y ago

> The default behavior is to nudge the user to upload. It's not that bad, if you do not provide a filename, by default it asks for confirmation before uploading. It's still easy to upload by accident[1] though, which I know is no-go in some environment. [1]: https://github.com/asciinema/asciinema/issues/316 https://github.com/asciinema/asciinema/issues/316

OskarS 7y ago

> One must assume this is the part of the design which allows potential monetization one day. Oh, heaven's no! Someone might at some point try to make money from a thing they made?! From their own labor?! How awful! Seriously: it's a stupendous tool and great service, provided free of charge and totally open source. Must we complain about the fact that they try to nudge you towards their tracking-free website, so you can see the tiny "Sponsored by Brightbox" rectangle in the footer, so that the project might yield some tiny financial return (though almost certainly not anywhere close to development costs)? It seems to me that they've done absolutely everything right except possibly live up to the standard that apparently all open source tools should be developed by starving ascetic monks. Come on.