• @[email protected]
    link
    fedilink
    English
    519 months ago

    I thought audacity was tarnished with spyware or something these days. Is it safe again?

    • @[email protected]
      link
      fedilink
      English
      899 months ago

      after looking into it:
      it’s not and it never was.
      a) it’s open source, so nobody’s putting that shit in there without getting caught
      b) it had an opt-in error reporting feature that would send data back… that was the entire thing…

      • @drislands
        link
        English
        229 months ago

        What? You must be joking. Really? The entire thing was about opt-in error reporting?

        … seriously, that can’t be it, can it?

        • Eager Eagle
          link
          English
          32
          edit-2
          9 months ago

          Not really that simple, it was an apparent change to the privacy policy that vaguely anticipated collection of arbitrary user data, which shook the confidence of the open source community on the project. The fact this happened right after audacity was sold was the cherry on top.

          https://github.com/audacity/audacity/issues/1213

          Changes were eventually reverted or revised.

        • @[email protected]
          link
          fedilink
          English
          109 months ago

          yep… really just that…

          i’ve used it forever with a very restrictive firewall and i’ve never seen it do anything unexpected… or any phoning home at all…

          • @StereoTrespasser
            link
            English
            79 months ago

            If opt-in telemetry is spyware then the FOSS community truly is off the rails.

          • @[email protected]
            link
            fedilink
            English
            19 months ago

            I’ve read this exact or very similar comment from you for the fourth time at least. You’re a spambot as far as I’m concerned.

      • @books
        link
        English
        69 months ago

        Point a has always me me wonder, is that accurate? Are there actually people going through the code to make sure open source isn’t malicious? I can barely read my coworkers code… Let alone a strangers.

        • @[email protected]
          link
          fedilink
          English
          69 months ago

          people are definitely going through the code on a project as popular as audacity…
          less well known stuff is much less scrutinized, of course

        • @aidan
          link
          English
          39 months ago

          Its way less work than going through the code to check for telemetry unless it is an intentionally hidden attack- just use Wireshark and check if there is network traffic other than checking for an update on program start.

        • @[email protected]
          link
          fedilink
          English
          29 months ago

          If a project is popular people will make changes to it every day. But you can look at the repo and judge for yourself.

    • @[email protected]
      link
      fedilink
      English
      749 months ago

      It was a pull request to add opt-out analytics that got blown out of proportion, where the real issue was the EULA and how tonedeaf of a move it was considering the community around Audacity. IIRC, they ended up replacing it with opt-in analytics.