Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Software contains nonconsensual spyware that exfiltrates the user's activity #495

Open
sneak opened this issue Sep 29, 2024 · 0 comments
Open

Comments

@sneak
Copy link

sneak commented Sep 29, 2024

Expected Behavior

The bridge gets me my mail.

Current Behavior

The bridge gets me my mail, and also reports on my activity without my consent to a third party.

Possible Solution

Disable the spyware unless the user opts in to such surveillance and tracking.

Steps to Reproduce

Run the bridge and check mail.

Version Information

Current: da76784

Context (Environment)

>>> telemetry

choose whether usage diagnostics are collected or not

Commands:
  disable      Usage diagnostics collection will be disabled
  enable       Usage diagnostics collection will be enabled


>>> telemetry disable
Usage diagnostics collection is enabled right now.
Do you want to disable usage diagnostics collection? yes/**no**: ^C

>>>

Detailed Description

See above. Furthermore, a dark pattern is present that exists to confuse the user into accidentally leaving it on. After entering an explicit command "telemetry disable", it then prompts for confirmation with confusing wording "do you want to disable yes/no", with the default option being "no", so if the user hits enter they will not disable (a double negative) and countermand their explicit instruction to "telemetry disable".

The default out of the box should be SURVEILLANCE OFF. If the user wants to transmit their data, ask them, and allow them to opt in. If the user enters the "telemetry disable" command, don't prompt them any further, and certainly don't make the default answer to that prompt to "ignore the user's command and keep sending telemetry".

Possible Implementation

Just remove all of the surveillance features from the app. They have no place in a client for end to end encrypted commuications.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant