3 ms·

"are easily disproven by a quick read of the article". Some people don't have the room to trust that it will always and flawless not do those things from their

"are easily disproven by a quick read of the article". Some people don't have the room to trust that it will always and flawless not do those things from their security needs. You're right most people don't care and probably won't be affected, but the "probably" is not acceptable for everyone. It didn't need to be bundled and Jetbrains had to provide awkward "delete these files on your system" for the people who genuinely couldn't live with the situation because the uninstall part was bugged.

tpmoney 3y ago
On the other hand, how is the AI plugin different from any other web connected plugin / service in the IDE? Some of this has to come down to being realistic about the choice you made when you bought into a proprietary (even if very well polished and highly useful) software. Either you trust that their software isn't arbitrarily sending your private code and information off or you don't. If you don't, you either firewall the app from outgoing connections or you don't use the app at all. Either way I don't see why the addition of a new feature and service suddenly changes how likely you think they are to be sending off your private code.
- TeMPOraL 3y ago
  Because other plugins don't have "sending code to third-party AI service" as their actual, advertised feature. This one does. And the "sending code to third-party AI service" part is something of a hot topic in enterprise these days, across many organizational levels.
  - andrewaylett 3y ago
    Honestly, I'm more worried about malice from plugins that aren't specifically intended to send my source off-site. The purpose of this plugin is to allow you to pay for a service. It's not sending anything anywhere without a subscription. Any other plugin could be malicious and would you ever notice if it started sending your code to an arbitrary third-party? AI is a hot topic, sure, and it's more likely that someone would want to send confidential code to an AI service than to (say) me, but at the end of the day the underlying policy should be the same: don't send confidential data to a third party without going through the necessary processes.

tpmoney 3y ago

On the other hand, how is the AI plugin different from any other web connected plugin / service in the IDE? Some of this has to come down to being realistic about the choice you made when you bought into a proprietary (even if very well polished and highly useful) software. Either you trust that their software isn't arbitrarily sending your private code and information off or you don't. If you don't, you either firewall the app from outgoing connections or you don't use the app at all. Either way I don't see why the addition of a new feature and service suddenly changes how likely you think they are to be sending off your private code.

TeMPOraL 3y ago
Because other plugins don't have "sending code to third-party AI service" as their actual, advertised feature. This one does. And the "sending code to third-party AI service" part is something of a hot topic in enterprise these days, across many organizational levels.
- andrewaylett 3y ago
  Honestly, I'm more worried about malice from plugins that aren't specifically intended to send my source off-site. The purpose of this plugin is to allow you to pay for a service. It's not sending anything anywhere without a subscription. Any other plugin could be malicious and would you ever notice if it started sending your code to an arbitrary third-party? AI is a hot topic, sure, and it's more likely that someone would want to send confidential code to an AI service than to (say) me, but at the end of the day the underlying policy should be the same: don't send confidential data to a third party without going through the necessary processes.