hexa- on Nostr: If you're using #devenv for your projects, please note that #telemetry was added in ...
If you're using #devenv for your projects, please note that #telemetry was added in the 1.4.0 release.
It handles `DO_NOT_TRACK=`¹ by sending that value along² with the telemetry instead of not sending any at all.
But worse, it tars up all files it can find through `git ls-files -z`³ and exfiltrates them to the service.
1/n
[1] https://github.com/cachix/devenv/blob/6c987a8795eedea872afe4d1c1ac518d0c7f6db1/devenv/src/cli.rs#L202-L204
[2] https://github.com/cachix/devenv/blob/6c987a8795eedea872afe4d1c1ac518d0c7f6db1/devenv/src/devenv.rs#L212-L214
[3] https://github.com/cachix/devenv/blob/6c987a8795eedea872afe4d1c1ac518d0c7f6db1/devenv/src/devenv.rs#L226-L257
It handles `DO_NOT_TRACK=`¹ by sending that value along² with the telemetry instead of not sending any at all.
But worse, it tars up all files it can find through `git ls-files -z`³ and exfiltrates them to the service.
1/n
[1] https://github.com/cachix/devenv/blob/6c987a8795eedea872afe4d1c1ac518d0c7f6db1/devenv/src/cli.rs#L202-L204
[2] https://github.com/cachix/devenv/blob/6c987a8795eedea872afe4d1c1ac518d0c7f6db1/devenv/src/devenv.rs#L212-L214
[3] https://github.com/cachix/devenv/blob/6c987a8795eedea872afe4d1c1ac518d0c7f6db1/devenv/src/devenv.rs#L226-L257