4 ms·

> It also phones home by default unless you turn it off (via crash and usage reporting) Is this new behaviour? I haven't set up a new device recently, but it a

• sneak 3y ago
  Usage reporting. Crash reporting is on by default without asking, as is use of the public relays. The arbitrary remote code execution vulnerability is much more troubling and critical, however. Most people don't realize that by running syncthing they grant the syncthing developer the ability to execute any code they want on their machine (including the ability to read or exfiltrate any file on the filesystem).