5 ms·

Worth noting is that this framework has telemetry [1] enabled by default [2] which gathers and sends off various information about your system unless you explic

by ptx 3y ago

Worth noting is that this framework has telemetry [1] enabled by default [2] which gathers and sends off various information about your system unless you explicitly disable it. [1] https://github.com/reflex-dev/reflex/blob/919f239168d789056dfca6c67a500637f3f0ab8e/reflex/utils/telemetry.py https://github.com/reflex-dev/reflex/blob/919f239168d789056d... [2] https://github.com/reflex-dev/reflex/blob/919f239168d789056dfca6c67a500637f3f0ab8e/reflex/config.py#L160 https://github.com/reflex-dev/reflex/blob/919f239168d789056d...

gigatexal 3y ago
There’s nothing user identifiable here though. No ips, locations, etc. I guess they could get it from the reception though hmm
- bakugo 3y ago
  > No ips It sends the information to a remote server, so your IP is obviously shared as well. It also sends a "project_hash" as "distinct_id" which sounds like a unique tracking ID to me.
  - gigatexal 3y ago
    I missed that project hash bit. Well. At least the tracking is disable-able.
  - shrimpx 3y ago
    Probably counting how many apps are in the wild to show investors.
adamrezich 3y ago
I haven't kept up with web framework type things in awhile—how commonplace is this? from here it looks kind of insane.
- RockRobotRock 3y ago
  Probably semi-common in Node world.
- apetuskey 3y ago
  We are keeping all our telemetry anonymous and don't store/track ips https://nextjs.org/telemetry https://nextjs.org/telemetry https://docs.streamlit.io/library/advanced-features/configuration https://docs.streamlit.io/library/advanced-features/configur...
  - adamrezich 3y ago
    good Lord, when did things get to be like this? if I shipped a free web framework with opt-out telemetry, I'd feel like a massive douche
    - shrimpx 3y ago
      Opt-out telemetry in companies based on open source projects has become a critical component of YC applications, VC pitches, and acquisition pitches. If it was opt-in of course nobody would turn it on. It's shady but I also somewhat understand the founders who are doing product-led growth by giving out the product on GitHub/PyPI, yet still need some usage metrics to quantify the stickiness to their backers. Pip installs and git clones/forks are only a loose indicator of real usage.
      - derealized 3y ago
        How about tracking licenses or subscriptions sold and show that to investors?
        shrimpx 3y ago
        How do you do that with an OSS project that's on GitHub?
        3y ago
matheusmoreira 3y ago
It's amazing how even open source software is becoming tainted by surveillance. We can no longer assume that code written by our peers will be free of such nonsense.
vaxman 3y ago
"Why iy iy iy, don't you uuuuuuse it?" Seriously tho, when one sees the first word of a Python project with the description "Performant", or a project put Out There by someone with a handle not linked to a bio (even a fake bio)... Anyway, software regs ARE coming because The Way of software developers has not been obscured from public view for some time now and the (relatively) recent ransomware of municipalities and hospitals resulting in deaths along with serious tensions among global powers have made it a priority. How ironic is it that Microsoft is best positioned to play the gatekeeper role? https://noguiltlife.com/wp-content/uploads/2023/01/scie-fi-memes-4.jpg.webp https://noguiltlife.com/wp-content/uploads/2023/01/scie-fi-m...
- vaxman 3y ago
  Oh alright, no more quoting Duran Duran lyrics ("The Reflex", 1984) on Hacker News, even if Nick Rhodes did mainstream audio samplers hah Hacker News is for serious discussions only --wow, already up to 119 comments already at https://news.ycombinator.com/item?id=36967829 https://news.ycombinator.com/item?id=36967829 "My-iy-iy time don't loooose it."

by ptx 3y ago

gigatexal 3y ago

There’s nothing user identifiable here though. No ips, locations, etc. I guess they could get it from the reception though hmm

bakugo 3y ago
> No ips It sends the information to a remote server, so your IP is obviously shared as well. It also sends a "project_hash" as "distinct_id" which sounds like a unique tracking ID to me.
- gigatexal 3y ago
  I missed that project hash bit. Well. At least the tracking is disable-able.
- shrimpx 3y ago
  Probably counting how many apps are in the wild to show investors.

adamrezich 3y ago

I haven't kept up with web framework type things in awhile—how commonplace is this? from here it looks kind of insane.

RockRobotRock 3y ago
Probably semi-common in Node world.
apetuskey 3y ago
We are keeping all our telemetry anonymous and don't store/track ips https://nextjs.org/telemetry https://nextjs.org/telemetry https://docs.streamlit.io/library/advanced-features/configuration https://docs.streamlit.io/library/advanced-features/configur...
- adamrezich 3y ago
  good Lord, when did things get to be like this? if I shipped a free web framework with opt-out telemetry, I'd feel like a massive douche
  - shrimpx 3y ago
    Opt-out telemetry in companies based on open source projects has become a critical component of YC applications, VC pitches, and acquisition pitches. If it was opt-in of course nobody would turn it on. It's shady but I also somewhat understand the founders who are doing product-led growth by giving out the product on GitHub/PyPI, yet still need some usage metrics to quantify the stickiness to their backers. Pip installs and git clones/forks are only a loose indicator of real usage.
    - derealized 3y ago
      How about tracking licenses or subscriptions sold and show that to investors?
      - shrimpx 3y ago
        How do you do that with an OSS project that's on GitHub?
        3y ago

matheusmoreira 3y ago

It's amazing how even open source software is becoming tainted by surveillance. We can no longer assume that code written by our peers will be free of such nonsense.

vaxman 3y ago

"Why iy iy iy, don't you uuuuuuse it?" Seriously tho, when one sees the first word of a Python project with the description "Performant", or a project put Out There by someone with a handle not linked to a bio (even a fake bio)... Anyway, software regs ARE coming because The Way of software developers has not been obscured from public view for some time now and the (relatively) recent ransomware of municipalities and hospitals resulting in deaths along with serious tensions among global powers have made it a priority. How ironic is it that Microsoft is best positioned to play the gatekeeper role? https://noguiltlife.com/wp-content/uploads/2023/01/scie-fi-memes-4.jpg.webp https://noguiltlife.com/wp-content/uploads/2023/01/scie-fi-m...

vaxman 3y ago
Oh alright, no more quoting Duran Duran lyrics ("The Reflex", 1984) on Hacker News, even if Nick Rhodes did mainstream audio samplers hah Hacker News is for serious discussions only --wow, already up to 119 comments already at https://news.ycombinator.com/item?id=36967829 https://news.ycombinator.com/item?id=36967829 "My-iy-iy time don't loooose it."