New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Etcher 1.4.4 Ignores Privacy Setting #2497

Open
mojoTX opened this Issue Oct 6, 2018 · 5 comments

Comments

Projects
None yet
6 participants
@mojoTX

mojoTX commented Oct 6, 2018

  • Etcher version: 1.4.4
  • Operating system and architecture: macOS 10.14 "Mojave" and MacBook Pro (Late 2016)
  • Image flashed: ubuntu-18.04.1-desktop-amd64.iso
  • Do you see any meaningful error information in the DevTools? No

I have the Little Snitch firewall installed, and when I installed Etcher and tried using it I was surprised at the number of outbound connections it made.

I'm posting an issue because if you go into the settings and de-select the option, "Anonymously report errors and usage information to resin.io," the app ignores the setting and still makes a large number of connections to well-known web usage sites such as Mixpanel, GoSquared, and Google.

I do not know if this is a bug in the Etcher code, or if it's cruft that is baked into the Electron JS framework. Regardless, it's misleading to give a user the option to opt-out of usage reporting, and still make the connections anyway.

screen shot 2018-10-06 at 13 41 22
screen shot 2018-10-06 at 13 49 55
screen shot 2018-10-06 at 13 49 45
screen shot 2018-10-06 at 13 49 34
screen shot 2018-10-06 at 13 49 16
screen shot 2018-10-06 at 13 49 03
screen shot 2018-10-06 at 13 48 51

@thundron

This comment has been minimized.

Contributor

thundron commented Oct 16, 2018

This is due to the services being registered but not really used with the flag disabled, so while it won't cause any harm, we can surely prevent the registration in the analytics module.
For instance, at this line here https://github.com/resin-io/etcher/blob/master/lib/gui/app/modules/analytics.js#L33 you can see what I mean :)

@lurch

This comment has been minimized.

Contributor

lurch commented Oct 16, 2018

I wonder if some of those warnings are triggered by a) the Etcher auto-update check and b) the Etcher success-banner?

@thundron

This comment has been minimized.

Contributor

thundron commented Oct 16, 2018

@lurch I was looking into the latter as well, but good guess on the auto-updater. It should be the call to AWS S3

@SilverWolf32

This comment has been minimized.

SilverWolf32 commented Oct 29, 2018

@thundron If it's making the network connections regardless, how is that not harmful? Even if it doesn't send any data, it still tells Google and the like that you're using Etcher.

@LeBaux

This comment has been minimized.

LeBaux commented Nov 10, 2018

Why bootable USB maker needs so much analytical data and connection to Facebook? Ignoring the user preference just takes the cake, please address this issue. Thank you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment