3 ms·
It's definitely a factor worth considering before purchasing the service. It's going to record an entire program running on your local machine, including all th
by db48x 6y ago
It's definitely a factor worth considering before purchasing the service. It's going to record an entire program running on your local machine, including all the data that it reads and writes. That includes local files, network connections, events from your window manager, pixels put on the screen, any environment variables that happened to be defined, etc. If any of that is private then you shouldn't upload the recording to Pernosco. If you're working on a public GitHub repository then your concern is pretty much limited only to your local environment. Make sure you don't have security tokens in your environment variables when you record. If your program opens files, make sure it opens something harmless. If your program visits webpages, don't record it visiting a page you want kept private. It's only natural then that the EULA would want you to give Pernosco permission to receive that data, store it for you, and then present it back to you during your debugging sessions.
There's also the on-premises option.
- roca 6y agoNote that the pernosco-submit script supports detecting "sensitive" environment variables leaking into the recording: https://github.com/Pernosco/pernosco-submit/blob/a6119a1b291487dd056c38cfeb4280604358ca12/pernosco-submit#L142 https://github.com/Pernosco/pernosco-submit/blob/a6119a1b291... And we accept PRs :-)
- db48x 6y agoThat's true! I ran afoul of that several times. It was easiest to clean up my environment, but I thought about writing a patch to rr that would bail out before recording anything if it detected those variables. Having that would have saved me from having to rerecord a few things.
- roca 6y agoI suppose an option to run the same checks in rr at recording time would be a fine feature to have ... though you could implement it pretty easily as a wrapper script too.