3 ms·
if you don't trust microsoft with telemetry, you shouldn't trust extensions written by random people either
by kova12 5y ago
if you don't trust microsoft with telemetry, you shouldn't trust extensions written by random people either
- nexuist 5y agoA perfect encapsulation of why these privacy complaints are next to worthless. You don't trust Microsoft with telemetry but your package.json pulls in 30 packages from completely random Internet strangers who published something that looked cool on GitHub. There's no coherent threat model here. There are a million different ways to shoot yourself in the foot and compromise your codebase before we even begin to consider what Microsoft can do with the knowledge of what buttons you press sometimes.
- Sanguinaire 5y agoA bit disingenuous I think; people are concerned about security when worrying about random packages, but privacy with Microsoft. MS have a history of being hostile to open source, but have been able to launder their image somewhat.
- siproprio 5y ago> There's no coherent threat model here. My threat model is Microsoft selling bogus "productivity enhancement" features to customers, pushing duplicated features, collecting data on costumers to acquire business sensitive information, and using marketshare as leverage to strangle better products.
- yjftsjthsd-h 5y agoKnown-bad is worse than unknown, surely?