8 ms·
VSCode deprecates Enable Telemetry, auto-enrolls you in Telemetry?
VSCode has deprecated "Enable Telemetry" and now auto-enrolls you into their new Telemetry option even if you've disabled all the previous telemetry settings.
Screenshot https://imgur.com/a/nxvH8cW https://imgur.com/a/nxvH8cW
The changes apply to the most recent version of vscode (version 1.61.0 released Oct 7).
- azinman2 5y agoWhat is this telemetry? My OS, computer model, IP, and VSCode version? Why is this so bad in comparison to any other web application or many other apps these days? I know many are up in arms about it, but what exactly is the hidden danger here? More ads about computer studs sold via a the meager Bing ads market?
- neurobashing 5y agofor some, simply not allowing me to opt-out without using other mechanisms (some sort of internal firewall etc) is enough. It's my computer, my network, and I get to say precisely how it is used; and that includes telemetry. There are other threats and reasons, that others more versed in this can explain, but that is the one I can speak to.
- sto_hristo 5y ago>It's my computer, my network, and I get to say precisely how it is used That is only realistic on linux. Everything else us just something you've rented. Besides, you can always go for independent vscode clone. I don't know how good it is as i haven't tried it myself. I just know it exists.
- kodah 5y agoLinux may be the only kernel (and general class of operating systems) that is capable of robust transparency and control, but that doesn't mean that it isn't a common ideal among more general computer users. The argument I hear most frequently is that users are fairly oblivious to one or more of these points: - That data is collected - That you or your device can be identified from data - That data does not have an expiration - How the data is used (eg: multi-use, for troubleshooting, for marketing) There are multiple ways to democratize knowledge, but most ideal is having companies just be upfront and teaching engineers why it's important to stress building notifications and/or levers for these kinds of capabilities.
- trutannus 5y agoA lot of the people who care this much also use Linux, so this is somewhat of a moot point.
- d_tr 5y ago> simply not allowing me to opt-out ... But let's note that this is not the case here. You can still opt out. If they are just resetting your old settings silently, however, then this is not a nice move and it will annoy exactly the people that care.
- edoceo 5y ago> they are just resetting your old settings silently That kind of behavior bis frowned upon in this establishment
- deleted 5y ago[deleted]
- hdjjhhvvhga 5y agoIt doesn't matter. What matters - if these reports are true - is how they treat their users with these dark patterns. You just don't treat other people like that, it's just basic human decency.
- hamburglar 5y agoAnd also there’s a legitimate slippery slope here. “Come on, this data they are sending is not sensitive” may apply today, but after you’ve opted in, now your job is perpetually keeping track of what new information they send in the future to make sure your assessment is still true. If there is a big off switch, the only thing we have to pay attention to is whether or not they are honoring that off switch.
- salawat 5y agoThe problem is other people treating other people's hardware as their playground. We've gone too long without a reckoning as software authors in this regard. You are not entitled to do whatever you wish with someone else's hardware because of a click through. Those that continue to do so will be (in my case) blacklisted from running on my network.
- shukantpal 5y agoThe user entitle software when they install it & give privileges. The issue has to be solved upstream. Instead of blaming software vendors, we have to build the systems to take back control.
- account42 5y agoSoftware that disregards the users wishes when you run it used to be called malware. An install is not an entitlement to do whatever you want. Software vendors are the ones writing this malware so why should they not be blamed.
- dspillett 5y ago> My OS, computer model, IP, and VSCode version? Right now, maybe. Or maybe more. Are you happy agreeing to it without being told? Being auto-enrolled without being told? What about if they add more later and don't feel the need to tell you as you didn't make the effort to opt out so must be happy with the tracking? > Why is this so bad in comparison to any other web application or many other apps these days? Because others do it doesn't make it right. People rail against web properties using what is seen as overly invasive telemetry/fingerprinting/profiling dark patterns too. > but what exactly is the hidden danger here? More information stored about you in more places, from whence it can leak further or dubious authorities can demand it be released, is a common fear in such cases for privacy campaigners and campaigners in general within the reach of certain governments. (if people downvoting would like to let me know why, I'd be genuinely interested to know your counter point(s), otherwise I'm just going to assume that what I have said is true and you don't like it)
- rvz 5y agoSo from bad to worse if true. Do you have evidence or a link to this?
- tmpfile 5y agoScreenshot https://imgur.com/a/nxvH8cW https://imgur.com/a/nxvH8cW
- agilob 5y agoYea, it's real, you have screenshot in description and PRs https://github.com/microsoft/vscode/pulls?q=is%3Apr+telemetry+is%3Aclosed https://github.com/microsoft/vscode/pulls?q=is%3Apr+telemetr...
- deleted 5y ago[deleted]
- deleted 5y ago[deleted]
- FastEatSlow 5y agoSource: https://code.visualstudio.com/updates/v1_61#_telemetry-settings https://code.visualstudio.com/updates/v1_61#_telemetry-setti... You are not enrolled into the auto telemetry yet, the deprecated options are still respected for now. The new telemtry has the levels of on, crash and off. Useful if I want not to contribute my device info, but still help them with issues with the software itself.
- anonymousab 5y ago> for now Looks like it should be "forever" according to this comment: https://github.com/microsoft/vscode/issues/134660#issuecomment-939163141 https://github.com/microsoft/vscode/issues/134660#issuecomme... But telemetry is one of those things that you can never trust a company about once it's in. Especially a company with a history of both mandatory telemetry and "oops didn't mean to ;)" telemetry-related setting resets.
- omreaderhn 5y agoCheck out https://vscodium.com https://vscodium.com https://github.com/VSCodium/vscodium https://github.com/VSCodium/vscodium Builds of VS Code with telemetry stripped out
- PaulKeeble 5y agoLooks identical, runs the same plugins just without the telemetry. The perfect solution.
- easton 5y agoExcept for the remote extensions, Pylance, and Live Share, IIRC. Which are pretty important to a lot of people's use of VSCode.
- 0des 5y agoWhile it can run the same extensions, some have to be requested to be added to the code-oss repository, as there are some things that I noticed aren't there, and the path recommended to those in this situation is to ask for them to be added on an as-desired basis.
- generalizations 5y agoThe one extension I use the most is the remote access via ssh, and that's not available on vscodium last time I checked. Only reason I'm still on VSCode.
- edoceo 5y agosshfs? Then the solve is outside the editor.
- generalizations 5y agoThat's my workaround, but it's less convenient.
- jeff42069 5y agoMicrosoft thank you. You brought us the LSP and as thus every editor has the same capabilities as your spyware anti pattern. No need to use Vscode anyway.
- username91 5y agoReminder that Sublime Text is constantly being improved and might be worth a look if you haven't tried it in a while ~ https://www.sublimetext.com/ https://www.sublimetext.com/
- 0des 5y agoA big reason why I don't buy sublime despite buying other products I don't use much is that it is not open source. That is a big one for me because even if I wanted to inspect for telemetry or other things, I'm not trusted to do so.
- TruthWillHurt 5y agoEnd of the day you're getting in bed with Microsoft. No matter ho open-source/friendly it seems.
- tyrfing 5y agoStill respects the old settings. Easy to confirm by checking network traffic.
- coliveira 5y agoThis is MS, of course they'll do this kind of thing.
- fartcannon 5y agoThe goal of stuff like this is to wear you down into accepting all default parameters. Then, slowly ratchet up the invasiveness.
- brundolf 5y agoAs someone who's worked on multiple power-user GUIs professionally, telemetry can be genuinely useful for improving the product. You can discover features that are never used and should be removed so attention can be focused elsewhere, and others that are used frequently and deserve more attention, and others that users may frequently have trouble with and should be fixed or improved. I'm not saying this justifies dark patterns, and I have no firsthand knowledge of whether Microsoft is exclusively using this data for legitimate purposes. If it were me I'd enable it by default but make it clear and easy to disable for those who care. That said: I don't think the knee-jerk assumption that this is a wholly evil thing is justified.
- krageon 5y agoTelemetry that is not opt-in is not legal, that is the end of it. No amount of justification will change it and no justification should even be present, because spying on people is always wrong unless it is with consent (which is given freely and not as part of some wishy-washy dark pattern corporatism).
- Crontab 5y agoI strongly disagree with the opinion that telemetry should be enabled by default. I feel that it should be the opposite.
- tmpfile 5y ago> make it clear and easy to disable for those who care Exactly. Telemetry can be a useful like you said and should be clear to users when they are being opted into it. Especially if someone has disabled all telemetry, they should be prompted to enable it or configure it with the new settings. If you silently re-enable it on their device when they already went thru the trouble of disabling it (and not expecting the settings to change day-to-day), you'll get some knee-jerk assumptions and reactions, whether your intentions where noble or not.
- brundolf 5y agoSure, they should have had a pop-up telling people about the change and making clear the option to opt-out. That would have been better. But seeing some of the responses here you'd think Microsoft had started streaming a video feed of your entire desktop with no way to disable it.
- seabass 5y agoMicrosoft has really been pushing the telemetry lately. Edge phones home far more than any other browser. Windows itself has no way to fully disable data collection (only the option to send "basic" or "full" data, including which websites you visit--oof). If you use Pro and you are enough of a power user to feel comfortable editing registry settings, that's what is now required to turn telemetry off, and even then it's hard to know you did it correctly. And this type of tracking is pervasive across the entire Microsoft ecosystem, including within Xbox, Minecraft, Teams, and now VSCode. It's disappointing to say the least.
- hda2 5y ago> and even then it's hard to know you did it correctly At that point, why not copy what people do with android? Just run a dummy "vpn" on your system that null-routes traffic going to microsoft-controlled domains or IP blocks. By no means a perfect solution for sure, but a really good one in practice. You have remember to clear the telemetry cache and reconnect your system to microsoft to get updates from time to time.
- RachelF 5y agoIf Windows 10 can't phone home, it thinks the network is disconnected and tries to fix the problem by restarting the network stack every ~10 minutes.
- bitwize 5y agoI'm sure that if not Windows 11, some version further in the future will interpret an inability to phone home as a network disconnect, and warn the user that they are out of compliance with their license agreement and their OS will stop working in 24 hours.
- wazzaps 5y agoCould you provide a source for that? Couldn't find anything on Google about that
- IshKebab 5y agoCan this be removed, given that it has been proven false? Do you guys do that?
- hu3 5y agoThey do. E-mail: hn@ycombinator.com
- yjftsjthsd-h 5y agoWhere was it proven false?
- hu3 5y agohttps://github.com/microsoft/vscode/issues/134660#issuecomment-939163141 https://github.com/microsoft/vscode/issues/134660#issuecomme... Test if for yourself if you must. I tested with Wireshark. It does respect your previous setting if it is more restrictive.
- Cabal 5y agoHow is this in any way false? I just updated to the latest stable release and it turned telemetry back on, despite my old settings being off. Same as the original screenshot.
- chadlavi 5y agoMicrosoft microsofting. By which I mean making confusing UX choices that no user would want, with bad presets, and that get misinterpreted in the comment-o-sphere as dark patterns infringing on our freedoms. They're transforming the control of telemetry to a different option. The problem is that the new option doesn't default to being based on your old telemetry opt-out value, it just defaults to "on" as if you just downloaded VSC. And this leads people to reading all kinds of evil intent into it. But it's probably not. We've all worked on big complicated products at big, slow companies, right? This is just bad design.
- siproprio 5y ago"bad at design": Either their engineers are incompetent, and accidentally chose the evil thing, or they intentionally planned it to happen this way.
- siproprio 5y agoSo, recapping vs code: * They implemented proprietary sync protocols * They obfuscate how 'settings' are saved - no, the settings.json is not what the editor uses and they hide stuff in the internal sqlite db they use * Capping open versions of the product * And finally, inserting proprietary "licensed" stuff and code that purposefully breaks if you're not licensed
- siproprio 5y agoMicrosoft: dishonest by default™
- solarkraft 5y agoMicrosoft tries to make you think it’s not, but VSCode is proprietary if you download the official builds. Don’t use it! The Vscodium project [0] exists and provides builds directly from the source. This version has none of the user-hostile behavior! It also makes you realize Microsoft’s new round of EEE overreach when you see that the maintainers have to provide the extensions through their own repository and the default C# debugger doesn’t work for licensing reasons (everything else works perfectly). Don’t trust Microsoft. Use the code they give you (which is generally fine), not their proprietary products (which are generally very much not fine). [0]: https://vscodium.com https://vscodium.com
- stormbrew 5y agoSadly the main thing I use vscode for doesn't work in vscodium, so it's completely useless to me: remote projects. Without that I may as well just go back to sublime, which is lighter and faster.
- rPlayer6554 5y agoI assume that means it is missing the tight integration with wsl which is my primary use case.
- jmiskovic 5y agoSo the Linux is forcing you to use proprietary version of SW? That's wild.
- 5e92cb50239222b 5y ago… or the other way around. It works fine-ish, better than using Windows directly in any case, for me at least.
- alexeiz 5y agoIt's not just WSL. There is "remote-ssh" for vscodium either.
- Tyriar 5y agoHi all, I work on the VS Code team. This came up the other day in stand up and the initial plan was to deprecate and eventually remove the old setting. Several of us pushed back and said while we may deprecate the setting in favor of something else, the old setting should always be respected due to the sensitivity around telemetry. If there's any confusion around this messaging it's because this discussion literally happened 2 days ago. I'll reopen https://github.com/microsoft/vscode/issues/134660 https://github.com/microsoft/vscode/issues/134660 to make sure we clear up confusion.
- bloqs 5y agoReally appreciate the open responsiveness. I think most people on this site know the position you are in. Dont be put off by irritated people, it's easy to underestimate how much of waking life some people spend dealing with frustrations with specific bits of software.
- jiggawatts 5y agoJust some feedback from the field: I work with some high-security networks, and the perception from those Microsoft customers is that whatever "good" that has come from Microsoft improving security in general has been completely undermined by the pervasive telemetry. Windows 10 alone has something like 200 individual settings for disabling its various forms of telemetry. Office adds several dozen more. Dotnet itself has telemetry, then PowerShell on top of that. VS Code and Visual Studio both send telemetry. On and on, and on... and then some more, and on... and ON and ON and... There's just no end to it. As administrators, it's like playing whack-a-mole against a thousand moles that are breeding exponentially. We don't want to play this game any more.
- Tyriar 5y agoNoted. I can't speak for anything other than VS Code but we have the toggle in product which is all you need to change to turn it off for the core, extensions may have their own setting or share the core toggle, but we often can't control that. There's also the very detailed page on the website detailing this as well as how to see all telemetry events that are sent in real time in the output panel and even how to print out a report of all events that get sent with their classification (code --telemetry).
- b9be520d93286 5y agoI have not trusted M$ since the mid 90s when I first installed Slackware Linux (after using OS/2 2.0 for a year or 2). I was using Vscodium occasionally and despite it being very easy to use, I'm going to uninstall it now and just focus on emacs and neovim. I do not even trust vscodium since the original codebase comes from tainted origins.
- siproprio 5y agoThe vscode team needs to start treating msft as a threat as well
- xvilka 5y agoJust use Emacs or Vim/NeoVim, they will never do that.
- nottaylorswift 5y agoAnd it's uninstalled. Back to Atom.
- pluc 5y agohttps://vscodium.com/ https://vscodium.com/
- jarcane 5y agounfortunately, as I discovered with a recent fresh Manjaro install, VSCodium cannot access the standard MS extension repo, which makes it next to worthless as a production tool because no one is uploading anything to their own repo. I can't work without my tools, and I can't be arsed to manually install and build and update every extension and its dependencies that I rely on.
- oh_boy 5y agoSure you can use vscodium with the official marketplace. I use that for over a year now without issues. https://github.com/VSCodium/vscodium/blob/master/DOCS.md#how-to-use-the-vs-code-marketplace https://github.com/VSCodium/vscodium/blob/master/DOCS.md#how...
- easton 5y agoOf course, that's against the Microsoft licensing agreement. The VS Extension marketplace is only licensed for use with Visual Studio and Visual Studio Code (as are all of the good Microsoft extensions: Pylance, the Remote Pack, Codespaces, etc). The top of the log file for the remote extension always says this: " * * Visual Studio Code Server * * Reminder: You may only use this software with Visual Studio family products, * as described in the license https://aka.ms/vscode-remote/license https://aka.ms/vscode-remote/license * "
- solarkraft 5y agoWhat do you mean by “no one is uploading anything to their own repo”? Everything I’ve wanted (exception: dotnet debugger) is on https://open-vsx.org/ https://open-vsx.org/.
- kova12 5y agoif you don't trust microsoft with telemetry, you shouldn't trust extensions written by random people either
- lfaoro 5y agoUse vscodium unless you need specific MS features. Alternatively inspect your outgoing traffic and block the telemetry sources. vscode will still try sending data to those servers but won’t be able to reach them. Little overhead.