Hacker News Reader

Comment by tinglymintyfrsh | Hacker News Reader

I use LS. Mini wouldn't work for me at work or home. It's probably targeted and useful for non-developer users.

I also use Objective See's LuLu, OverSight, ReiKey, and RansomWhere.

LuLu + LS makes any app using telemetry shriekingly obvious and selectively denyable.

Work additionally deploys YARA, MS MDE, Malware Bytes, and an MDM. There are other internal tools for password projection, DLP (anti-exfil), and pre-execution binary allow/denylisting.

View on HN

LuLu itself sends telemetry to Sentry by default

This is why I pay for LS. The whole point of the software is to avoid nonconsensual phone-home; if it does it itself, how or why would you ever trust the developer?

I'd literally rather pay for proprietary software than maintain a fork of LuLu.

It's not nonconsensual, you can literally block it with itself.

It transmits telemetry non-consensually before you even get a chance to tell it not to. That is, unless you know of this beforehand and are also tech-literate enough to understand this can be circumvented by disabling your internet connection before you first open the application - something you cannot reasonably expect from all users, seeing as how this telemetry gathering is not advertised anywhere and had to be found in the source code.

Installing it is consent.

This is false in multiple ways (one of which would be legal for this - I believe - Spanish organisation), but I suspect you know this and are simply just trolling now.

Sorry no, have you never heard of a Terms of Service? Insults don’t really matter here, but nice try.

They have no terms of service or privacy policy. As I said, their telemetry collection remains entirely undisclosed and on top of that collects much more data than you might expect it to, as the Sentry SDK they use is wrongly configured to be in debug mode. It's a complete shitshow.

They don't?! Okay fair, I was wrong that's pretty bad.

that's the only telemetry it sends (afaict) and that's pretty easy to block with lulu itself (which is what i do).

Reply on news.ycombinator.com