3 ms·
Microsoft has been known to do things like log all command line arguments in dotnet, for example https://docs.microsoft.com/en-us/dotnet/core/tools/telemetry ht
by 0x0 6y ago
Microsoft has been known to do things like log all command line arguments in dotnet, for example https://docs.microsoft.com/en-us/dotnet/core/tools/telemetry https://docs.microsoft.com/en-us/dotnet/core/tools/telemetry
And then they post the results publicly. https://devblogs.microsoft.com/dotnet/what-weve-learned-from-net-core-sdk-telemetry/ https://devblogs.microsoft.com/dotnet/what-weve-learned-from...
- aspyct 6y agoIndeed. And since they are very open as to what they collect, feel free to point out anything disturbing. As for the publicly posted results, it seems to me like they try to understand who uses their products and how. That's not worse than basic website analytics, and that's data they certainly need in order to prioritise their development. But I may be missing your point. Can you point to a specific datapoint in those documents that you object to, and explain why?
- 0x0 6y agoWhen they post full csv files with all kinds of command line arguments including typos, who's to know your "dotnet run fix-aspycts-bankrupcy-account" command, where you forgot the first "run" argument, won't end up in a csv some day?
- aspyct 6y agoExcept that they don't seem to be recording the arguments to `dotnet run`: https://docs.microsoft.com/en-us/dotnet/core/tools/telemetry#collected-options https://docs.microsoft.com/en-us/dotnet/core/tools/telemetry...
- 0x0 6y agoSo you typo and forget the "run" part. Now what? I can't believe I have to argue about how bad it is to have CLI tools send their arguments as telemetry. Even half-arsed lately introduced attempts at redaction doesn't change the fact that the entire mindset of the developers are poison.
- aspyct 6y agoIf you'd taken the time to read the documents you linked to, you would realise that they do _not_ record arbitrary strings. I can't believe people don't even read the "proof" they provide themselves.
- 0x0 6y agoObviously they record arbitrary strings. One of the mains points they made was to make fun of the typo "bulid".
- snaj429 6y agoYou can see the telemetry events VS Code sends: https://code.visualstudio.com/docs/getstarted/telemetry#_output-channel-for-telemetry-events https://code.visualstudio.com/docs/getstarted/telemetry#_out... Does anything here seem malicious?