luking-dev / webiopi

Automatically exported from code.google.com/p/webiopi
0 stars 0 forks source link

Google Analytics not disabled by default #39

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
webiopi.js  still has the Google Analytics code, with a hard coded account id. 
Might be an idea to either comment it out or remove altogether.

Original issue reported on code.google.com by lutz.ben...@gmail.com on 24 Mar 2013 at 8:08

GoogleCodeExporter commented 9 years ago
This is a feature I personally need to get statistics about WebIOPi use. 
So I know Python 2/3 proportions, screens resolutions, browsers used, and 
languages...

Original comment by tro...@trouch.com on 24 Mar 2013 at 8:30

GoogleCodeExporter commented 9 years ago
Fair enough.  It would just have been nice to be notified about that.

I am using it on a 256MB Model B, Python2, en-us, across all possible screens 
and browsers and devices (Android, iOS, WebOS, IE, Chrome, Mozilla, Safari 
etc). Since I see no need to tell Google about every individual call to 
webiopi, I removed that part of the code myself. 

Thank you for the very nice API.

Original comment by lutz.ben...@gmail.com on 24 Mar 2013 at 9:50

GoogleCodeExporter commented 9 years ago
REST calls are not logged.
With usual browser technical data and user origins, only the page loaded and 
webiopi version used are logged.
This is very useful to me, and used to improve the product, don't see it as a 
spy.
I don't need to notify as the code is open, I have nothing to hide, the JS part 
is even not obfuscated.

Posting an issue / asking to remove that really disappointed me !
Do you ask all Android / iPhone developers to remove their GA tracker from 
their (native) apps ?
I think you should drop packets to GA on your router...

Instead of asking that, you should propose another privacy-safe, open source 
and easy way to get statistics.

Original comment by tro...@trouch.com on 24 Mar 2013 at 10:13

GoogleCodeExporter commented 9 years ago
My proposal would be to make GA an opt-in option.

Original comment by lutz.ben...@gmail.com on 24 Mar 2013 at 10:53

GoogleCodeExporter commented 9 years ago
In my opinion, GA should be opt-in because not every user will realize that 
google and you get the URL of their webiopi installation as soon as they start 
using it.

Considering that the devices connected to the GPIOs or the raspberry pi itself 
might be damaged if controlled incorrectly, I would not like my raspberry pi to 
show up on a complete list of all webiopi installations.

What app developers do to their apps is their buisness, but with many kinds of 
apps you expect them to contact their vendor's servers to download content 
(social media apps, weather apps, …). There is no technical need for a 
webiopi server to need any 3rd party help, so I don't expect it to contact any 
other server.

May I ask why you need those statistics? I expect you get download statistics 
from google code, you get bug reports, how do you improve the product by 
knowing how many people tried which feature? Using your arguments, you could 
just as well include a real backdoor, because it can't truly hide that in open 
source code and people should expect that when they download anything.

Original comment by wrtlpr...@gmail.com on 7 Jun 2013 at 8:40