Earlier today I learned that pip includes a bunch of telemetry data in the HTTP User-Agent header for every request it makes, and has for >10 years (with increasing amounts of info): github.com/pypa/pip/blob/545ed…Not only is this not opt-in (as any telemetry should be), but there isn't even an opt-out. I'm still shocked and not sure what conclusions to draw from this, except: This is not okay!
I remember there was quite an uproar when Go tried to add opt-out telemetry a while back, and rightly so. How did I never hear about Python doing this before? Sure, less details, but still sending telemetry without ever asking for consent.
I like #Python, I want to keep using it, but can I if core tooling ignores user consent like this? And what other key development tools (Python or otherwise) have things like that and I just haven't noticed yet?
pip/src/pip/_internal/network/session.py at 545eda389c41478e2f99d23212254d757d8c2cef · pypa/pip
The Python package installer. Contribute to pypa/pip development by creating an account on GitHub.GitHub
From what I can tell this is parsed here: github.com/pypi/linehaul/blob/… (via github.com/pypi/warehouse/blob…)
Not sure if that's the only place where anything is done with this, but at least in this instance it seems to ignore any of the more privacy invasive and non UA-fitting info anyway. 🤔
(Like a UA saying "I'm pip x.y on python 3.z" seems somewhat reasonable to me, the rest not so much.)
The place to ask for more info/clarification about this would probably be discuss.python.org/t/about-the…?
About the Packaging category
A place to talk about packaging Python software and the tooling to make that possible. Use this category for discussions relating to anything packaging in Python, including but not limited to: PyPI / Warehouse pip setuptools wheel virtualenv Pip…Discussions on Python.org
The U.K. government is warning of continued malicious activity from Russian-aligned hacktivist groups targeting critical infrastructure and local government organizations in the country in disruptive denial-of-service (DDoS) attacks.
GitHub - tgeczy/NVSpeechPlayer: A Klatt-based speech synthesis engine written in c++
A Klatt-based speech synthesis engine written in c++ - tgeczy/NVSpeechPlayerGitHub
OpenAI defines their mission as creating "highly autonomous systems that outperform humans at most economically valuable work."
We need to flip this framing.
The economy is best understood as the way humans divide up the work, and distribute the results.
1/4
2/4
Unless the supply of that product can be somehow constrained by way of legal or economic restrictions, this means the price will drop.
What makes work economically valuable is that it is performed by humans.
3/4
4/4
LukeAlmighty 🇨🇿
in reply to Archos • • •Český politický humor nenávidím, protože nikdy nemá pointu ani hloubku.
Tento vtip je vzácná výjimka.
Archos
in reply to LukeAlmighty 🇨🇿 • • •