Hacker News Reader

Comment by ptx | Hacker News Reader

Worth noting is that this framework has telemetry [1] enabled by default [2] which gathers and sends off various information about your system unless you explicitly disable it.

[1] https://github.com/reflex-dev/reflex/blob/919f239168d789056d...

[2] https://github.com/reflex-dev/reflex/blob/919f239168d789056d...

View on HN

I haven't kept up with web framework type things in awhile—how commonplace is this? from here it looks kind of insane.

I was shocked when I discovered that Dart, a programming language, included telemetry.

Of course, since it’s coming from Google, I suppose it shouldn’t have been quite so surprising.

Probably semi-common in Node world.

We are keeping all our telemetry anonymous and don't store/track ips

https://nextjs.org/telemetry https://docs.streamlit.io/library/advanced-features/configur...

good Lord, when did things get to be like this? if I shipped a free web framework with opt-out telemetry, I'd feel like a massive douche

Opt-out telemetry in companies based on open source projects has become a critical component of YC applications, VC pitches, and acquisition pitches. If it was opt-in of course nobody would turn it on. It's shady but I also somewhat understand the founders who are doing product-led growth by giving out the product on GitHub/PyPI, yet still need some usage metrics to quantify the stickiness to their backers. Pip installs and git clones/forks are only a loose indicator of real usage.

How about tracking licenses or subscriptions sold and show that to investors?

How do you do that with an OSS project that's on GitHub?

by not trying to turn it into a VC fueled rent-seeking cash cow?

Fair enough.

By switching to a proprietary license for your proprietary product.

If we call things by their names, it's not surprising at all and actually makes solving the situation much easier.

if it's a paid product and it's part of an agreement for support then sure, but for a free product? when you know some high percentage of users are never going to even know that the option to opt out exists?

man... the modern YC/VC webdev game is rough.

Sorry, but this is bullshit.

"Why iy iy iy, don't you uuuuuuse it?"

Seriously tho, when one sees the first word of a Python project with the description "Performant", or a project put Out There by someone with a handle not linked to a bio (even a fake bio)...

Anyway, software regs ARE coming because The Way of software developers has not been obscured from public view for some time now and the (relatively) recent ransomware of municipalities and hospitals resulting in deaths along with serious tensions among global powers have made it a priority. How ironic is it that Microsoft is best positioned to play the gatekeeper role? https://noguiltlife.com/wp-content/uploads/2023/01/scie-fi-m...

Oh alright, no more quoting Duran Duran lyrics ("The Reflex", 1984) on Hacker News, even if Nick Rhodes did mainstream audio samplers hah

Hacker News is for serious discussions only --wow, already up to 119 comments already at https://news.ycombinator.com/item?id=36967829

"My-iy-iy time don't loooose it."

It's amazing how even open source software is becoming tainted by surveillance. We can no longer assume that code written by our peers will be free of such nonsense.

There’s nothing user identifiable here though. No ips, locations, etc. I guess they could get it from the reception though hmm

> No ips

It sends the information to a remote server, so your IP is obviously shared as well. It also sends a "project_hash" as "distinct_id" which sounds like a unique tracking ID to me.

Probably counting how many apps are in the wild to show investors.

I missed that project hash bit. Well. At least the tracking is disable-able.

Reply on news.ycombinator.com