Earlier today I learned that pip includes a bunch of telemetry data in the HTTP User-Agent header for every request it makes, and has for >10 years (with increasing amounts of info): https://github.com/pypa/pip/blob/545eda389c41478e2f99d23212254d757d8c2cef/src/pip/_internal/network/session.py#L109
Not only is this not opt-in (as any telemetry should be), but there isn’t even an opt-out. I’m still shocked and not sure what conclusions to draw from this, except: This is not okay!
I remember there was quite an uproar when Go tried to add opt-out telemetry a while back, and rightly so. How did I never hear about Python doing this before? Sure, less details, but still sending telemetry without ever asking for consent.
I like #Python, I want to keep using it, but can I if core tooling ignores user consent like this? And what other key development tools (Python or otherwise) have things like that and I just haven’t noticed yet?
Už zítra se koná hackday!
13. 1. od 10:00 až do večera!
Těšíme se na vás v Karlíně!