There is a security issue with the share function.

[ruslanakhmetov1986-collab]

Description

Explain to me who the idiot was who came up with the idea of ​​sharing my session without warning? Why is my data being uploaded to open-source servers anyway? This is terrible from a security standpoint.

Plugins

No response

OpenCode version

No response

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

No response

Terminal

No response

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• Privacy and Data Collection Clarification Request #459: Privacy and Data Collection Clarification Request - Discusses data collection and transparency concerns
• Session accessing .env file without asking the user. Curious what is the default behavior to prevent reading .env files and the likes of it. #4308: Session accessing .env file without asking the user - Related security concern about file access without user consent

Feel free to ignore if none of these address your specific case.

[TheHamkerCat]

You can use this for now in config to completely disable this feature:

{
   "share": "disabled"
}

This should be the default though, i completely agree

[mjhcorporate]

I agree, this makes it way too easy to inadvertently upload user data without informed consent. At the very least, there should be a confirmation dialog that informs the user what is being uploaded to where, and allows them to opt out.

This is a serious UX and privacy issue.

[mjhcorporate]

@ruslanakhmetov1986-collab : As a fellow user I understand and share your frustration, but I cannot condone the tone of your message. It looks like it was written in the heat of the moment. Maybe you could edit it?