Tuesday, January 09, 2024
support@conference.yunohost.org
January
Mon Tue Wed Thu Fri Sat Sun
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19 20
21
22
23
24
25
26
27
28
29
30
31
       
             

[07:28:21] <lapineige> > <@chatpitaine:cirkau.art> lapineige: Thank you. Maybe a little modification in the peertube documentation would be appreciated : https://docs.joinpeertube.org/maintain/tools#remote-peertube-cli

In reply to @chatpitaine:cirkau.art
lapineige: Thank you. Maybe a little modification in the peertube documentation would be appreciated : https://docs.joinpeertube.org/maintain/tools#remote-peertube-cli

No it's their standard setting, but in Yunohost case we don't think that's a good default.
[11:36:20] <laguill13> Hi, what are the benefits and drawbacks using proxmox as home server and install yunohost on top of it ? Is it consumming more ressources ?
[12:44:43] <hook> laguill13: I am far from an expert, but unless you run Proxmox to host a lot of other stuff separately from Yuno, it seems a waste and extra complication to me
[13:20:28] <laguill13> > <hook> laguill13: I am far from an expert, but unless you run Proxmox to host a lot of other stuff separately from Yuno, it seems a waste and extra complication to me

This is what I think also. It just on homeassitant forum a lot of peoples recommends usinx proxmox also.
That's why I was a bit lost 😅
[13:33:06] <hook> I's say either or
[14:41:04] <nightbronze> Where can I find yunohost privacy policies?
[14:44:36] <Mateusz Szymański> > <@nightbronze:matrix.org> Where can I find yunohost privacy policies?

regarding? Software package collects no data, for apps -> refer to specific app policy, for forums there's 'About' section IIRC, for code hosting refer to Github's policy
[14:46:24] <nightbronze> > <@orhtej2:matrix.org> regarding? Software package collects no data, for apps -> refer to specific app policy, for forums there's 'About' section IIRC, for code hosting refer to Github's policy

I'm not talking about the applications, but the yunohost services themselves. Does yunohost do telemetry? How to deactivate it?
[14:46:45] <Mateusz Szymański> Yunohost does not do any telemetry as far as I know
[14:48:13] <nightbronze> Why not clearly state this in the privacy rules on the website?
[14:50:54] <eric_G> nightbronze: Just out of curiosity, have you ever been banned from this channel and come back with a new nickname?
[14:51:15] <Mateusz Szymański> Although I see it phones home to https://app.yunohost.org/default/v3/apps.json to get available apps, so I'll let someone more experienced answer the question 🤔
[14:54:34] <nightbronze> > <@ericg:matrix.org> nightbronze: Just out of curiosity, have you ever been banned from this channel and come back with a new nickname?

What ? I've never been banned on Matrix and I've never installed yunohost, I plan to, but I read a conversation here from a user who suspected yunohost of doing telemetry. So I would like to be sure that yunohost does not do telemetry before installing it, because I could not find the confidentiality rules of this tool, neither on the website, nor on github. So I may be waiting for the response from the main developers.
[15:09:43] <eric_G> Apologies for the question, but I had to ask 😬. For the telemetry on YunoHost, there is none as far as I know
[15:10:24] <Aleks (he/him/il/lui)> it's actually one of the most requested feature from packagers, some even say since 9 years !
[15:12:38] <nightbronze> Okay, I'm reassured. But the user said he had his IP address blocked. Were you the one who blocked his IP address?
[15:14:33] <Aleks (he/him/il/lui)> idk we have abuse-detection system like any decent infrastructure and it's probably getting banned through that system because of all his funky stuff ?
[15:19:30] <nightbronze> By translating the message from titus who is probably one of the developers of yunohost https://matrix.to/#/!gvRsI7cG1o9SVr56:pijean.ovh/$rqo74KTOG-nTMizp8IWyIwJQzoM3MArcdQfLtPhWeis?via=matrix.org&via=aria-net.org&via=sans-nuage.fr , he let it be known that he was aware of the blockage. What kind of offense did he commit to be automatically blocked by yunohost's abuse detection system?
[15:20:11] <Aleks (he/him/il/lui)> you are totally sounding like *not* the guy
[15:22:43] <nightbronze> Sorry if I ask too many questions
[15:23:24] <Aleks (he/him/il/lui)> we respect the privacy of our users, why should we share any info on how he triggered our abuse system to an absolutely totally unrelated person ?
[15:27:03] <nightbronze> I'm also a C# developer, an abuse detection system can trigger an IP address block if it suffers a DDOS attack or if the IDS/IPS triggers an alert, But I'm not sure if the user here had committed this type of offense, tell me if I'm wrong..
[15:28:05] <nightbronze> Which seems more like a manual blockage. Hence my previous question about telemetry
[15:30:36] <Aleks (he/him/il/lui)> ¯\_(ツ)_/¯ YunoHost is open source, if you find any telemetry or backdoor, please tell us about it
[15:31:01] <Aleks (he/him/il/lui)> sometimes we do wish we had telemetry dude
[15:31:22] <eric_G> I am in for telemetry 😅
[15:32:03] <Aleks (he/him/il/lui)> maybe we shall implement telemetry before that famous user registration portal
[15:35:32] <nightbronze> Thank you for the answer. Can you add the confidentiality rules to the website with the clear mention that yunohost does not practice any telemetry. This way there will be no problem, because I was surprised not to find the privacy rules on the yunohost website. Because virtually all other tools of the size of yunohost display clear rules on confidentiality.
[15:35:52] <Aleks (he/him/il/lui)> can you provide example such that we get some inspiration ?
[15:36:59] <nightbronze> https://www.umb.network/umb_network_privacy_policy_v1.1.pdf
[15:38:54] <nightbronze> > <@Alekswag:matrix.org> maybe we shall implement telemetry before that famous user registration portal

What types of telemetry? Will users have the right to deactivate it?
[15:42:52] <Aleks (he/him/il/lui)> Deactivate it ? Hmmm idk, maybe we'll disable it for the by banning their IP
[15:44:00] <Aleks (he/him/il/lui)> Maybe they can ask for it by sending us their id card idk
[15:45:06] <nightbronze> What are the best alternatives to yunohost?
[15:46:34] <Aleks (he/him/il/lui)> Aaah now we are talking
[15:47:00] <Aleks (he/him/il/lui)> Freedombone ? I think it changée name
[15:47:00] <Aleks (he/him/il/lui)> Freedombox, cpanel, cloudron
[15:47:25] <Aleks (he/him/il/lui)> Docker obviously
[15:48:38] <Aleks (he/him/il/lui)> You should really be trying Docker, it's the perfect fit, i use it myself, it even has no backdoor or telemetry unlike y- eer i mean unlike the future yunohost
[15:49:24] <nightbronze> I want to use a long term solution, without telemetry features having to be implemented along the way like you claim to do on yunohost
[15:49:50] <Aleks (he/him/il/lui)> Docker definitely is long term
[15:50:52] <nightbronze> I asked about telemetry, not backdoors 😁
[15:52:14] <nightbronze> You started by reassuring me by telling me that there was no telemetry in yunohost, then you told me that you were going to do it very soon. I don't understand your strategy ¯\_(ツ)_/¯
[16:03:19] <Aleks (he/him/il/lui)> My strategy is: i'm tired of toxic trolls and people doubting about our efforts we put into writing ethical software. At the end of the day, we write the software running on your machines as root. If you don't trust us, dont run Yunohost, period

[16:14:16] <hook> This room is not bridged to Matrix and/or IRC, is it?
[16:18:26] <Mateusz Szymański> > <hook> This room is not bridged to Matrix and/or IRC, is it?

this room is hosted on Matrix and Libera.chat bridge is gone
[16:22:02] <hook> So this room is on Matrix and bridged to XMPP (…); and the IRC channel is separate then?
[17:05:21] <tituspijean> IRC is dead for the time being.
[17:13:23] <Chris> > <@Alekswag:matrix.org> maybe we shall implement telemetry before that famous user registration portal

Seriously, you're going to do telemetry? 😵‍💫
[17:14:09] <Aleks (he/him/il/lui)> it's been asked for since *nine* years
[17:15:56] <Chris> It doesn't matter how long it's been requested or who's asking it. If you decide to do this, you will need to notify all yunohost users that you are doing telemetry.
[17:16:17] <Aleks (he/him/il/lui)> "nine years" is the new "over 9000"
[17:20:16] <eric_G> Packager point of view here. telemetry will help channel packaging effort where it is needed. With more than 300 applications in the catalog, we spend a lot of time updating applications that no one installs
[17:22:25] <Chris> I understand, but the user must agree or not to authorize this. Telemetry should not be imposed on everyone
[18:08:48] <Aleks (he/him/il/lui)> as said, not much to worry about, you can send us your IP address and we will make sure that you get unsubscribed from all yunohost services ourselves !
[19:49:30] <freetux> B’soir. Il y a une solution pour mettre à jour Lychee de 5.0.1 à 5.0.2 ? Ça a l’air de bloquer pour quelques personnes : https://github.com/YunoHost-Apps/lychee_ynh/issues/94 😕
[19:52:08] <Aleks (he/him/il/lui)> classic nodejs hell
[19:52:31] <Aleks (he/him/il/lui)> naively i would try to find the node_modules folder inside /var/www/lychee, deleting it, and the attempting to reupgrade
[20:39:55] <freetux> I can’t find this folder. 🤔
[21:08:20] <hook> Did anyone try running this yet (on YunoHost)?
https://sr.ht/~nicoco/slidge/
[21:35:42] <hook> eric_G, is there anything else I can help you with here?
https://github.com/YunoHost-Apps/borgwarehouse_ynh/pull/2
I’ll be away from my server for a good week, so if there is anything I can do today, I’d love to help.
[23:02:58] <lapineige> > <@nightbronze:matrix.org> What ? I've never been banned on Matrix and I've never installed yunohost, I plan to, but I read a conversation here from a user who suspected yunohost of doing telemetry. So I would like to be sure that yunohost does not do telemetry before installing it, because I could not find the confidentiality rules of this tool, neither on the website, nor on github. So I may be waiting for the response from the main developers.

no data collected = no need to talk about it
[23:04:36] <lapineige> > <@Alekswag:matrix.org> Deactivate it ? Hmmm idk, maybe we'll disable it for the by banning their IP

I'd argue to pair that with their credit card numbers too. Just to be sure
[23:05:07] <lapineige> > <@nightbronze:matrix.org> I want to use a long term solution, without telemetry features having to be implemented along the way like you claim to do on yunohost

Did you really miss the joke here ?
[23:10:42] <lapineige> You know people are aware of GDPR and other data protection regulation, which make it mandatory, as well as opt-in and so on? 😛
And that Yunohost is FLOSS and that anyone can inspect the code and detect any nasty change ? 😛
Also : it was a joke, come on...
[23:38:23] <Chris> > You know people are aware of GDPR and other data protection regulation, which make it mandatory, as well as opt-in and so on? 😛
> And that Yunohost is FLOSS and that anyone can inspect the code and detect any nasty change ? 😛
> Also : it was a joke, come on...

Correct, but the yunohost server can very well do telemetry during application updates and installations even if the yunohost source code is clean. This does not prevent this
[23:41:36] <Aleks (he/him/il/lui)> then stop using Yunohost bro
[23:45:33] <lapineige> Yunohost server could also send you malicious code and you would run it with root, and you couldn't see it unless you first inspect 100% of the downloaded code.
You know, it's computer stuff, you'll have to trust some third party at some point
[23:45:33] <lapineige> If you don't trust a software provider, just don't use the software
[23:46:59] <lapineige> That said, yunohost devs are well aware of what's legal or not, and have an ethical mindset... You're free to not trust it, but don't ask it to be writen on a big wall (it won't change anything on the matter of trust)
[23:49:33] <Chris> > Yunohost server could also send you malicious code and you would run it with root, and you couldn't see it unless you first inspect 100% of the downloaded code.
> You know, it's computer stuff, you'll have to trust some third party at some point

I agree, I didn't say otherwise. I only said that the yunohost source code is not enough to determine whether yunohost is doing telemetry or not, because if there is to be telemetry then it will be on the yunohost server that it will happen. It may very well store IP addresses or any other information without users knowing. But if you say that the server does not store any information about users then it is a good
[23:50:07] <Aleks (he/him/il/lui)> this is the support channel, not the "let's debate a non-existing feature"-channel
[23:52:58] <Chris> > That said, yunohost devs are well aware of what's legal or not, and have an ethical mindset... You're free to not trust it, but don't ask it to be writen on a big wall (it won't change anything on the matter of trust)

I think if it was written clearly on the site nightbronze would certainly not have come to ask questions on the subject, and we certainly would not have had this discussion here, because things would have been clear
[23:52:59] <lapineige> Right, sorry for the off topic
[23:53:44] <lapineige> It's mandatory to tell about any date usage and so on. If it's not told, there's not
[23:55:59] <lapineige> Also apparently that person came asking this question because of some other being paranoid on "hey Yunohost does evil stuff" (with no proof obvisouly, because it doesn't). This happens from time to time, and not clear statement would change it, because there's always someone to talk about false idea such as "proprietary softwares in Yunohost" and stuff like that even it's been said all over the place that's false
[23:56:07] <lapineige> It's just a waste of time
[23:56:44] <lapineige> And as Aleks (he/him/il/lui): said, this is a support room, that discussion took too much space for an off-topic