Hacker News new | ask | show | jobs
by sillysaurus3 3245 days ago
What precisely is Kite collecting in this case? Ideally backed by a link to a github repo proving that they're collecting whatever people are saying they're collecting.

I've been reading for about 10 minutes and can't find any references. The closest I found was https://twitter.com/gerardroche/status/891802572373319680 which links to https://github.com/kiteco/kite-installer/blob/master/ext/tel... but that doesn't actually say what they're collecting.

That class seems to be collecting time spent, identified by the variable `name`. But it's not immediately obvious what `name` is being set to. If it's set to a full file system path, then I agree it's a breach of trust. But if it's something generic like 'options screen' then clearly they're just trying to improve their product.

People here seem to be losing their minds over this, so I'm trying to figure out whether it's justified or if it's another game of telephone.

EDIT: Found the code: https://github.com/SideBarEnhancements-org/SideBarEnhancemen...

Am I misreading this, or is everyone losing their minds over collecting how much time was spent editing certain file extensions? The only thing that seems to be remotely dubious is "activeNonBundledPackageNames", and that doesn't seem sensitive.

2 comments

The reddit comment linked says:

> Post #27 (wbond):

> > adam314: Hi everyone, member of Kite here. The SideBarEnhancements telemetry was

> > originally added to gather data around what programming languages we should support next.

>

> [wbond:] The question is, why did you try to hide who the data was being sent to? And why did you ask

> to capture activeNonBundledPackageNames? That bit of data seems like a very non-anonymous

> collection of information. You could be capturing internal package names and consequently

> exfiltrating the existence of development of competitors products.

It uses a machine-specific identifier (MAC address), making it traceable across the public IPs sending data. With some resolution due to the hourly pings. That could be valuable in the right/wrong scenarios, although there are tons of other things recording data like that of course (websites).