Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Which is why we left discord for self hosted mattermost with auto-login for our community. Its just so predictable that discord will become a silo the day they decide to make money


That's awesome! I also run a self-hosted mattermost. Do you use the EE or CE?

Because you seem to care about this kind of stuff, note that at least the CE (and presumably also the EE) versions of Mattermost have phone-home to segment.io embedded in the server, which can be disabled with the undocumented and exceedingly misleadingly-named 'MM_LOGSETTINGS_ENABLEDIAGNOSTICS=false' var in the env. It's part of the growing trend of free software spyware being developed by small groups of isolated people in for-profit enterprises.

The other phone home it does is to check for a version's security alerts, which you may want, but is still assume-consent-and-dont-bother-to-ask phone-home and can be disabled with the similarly undocumented 'MM_SERVICESETTINGS_ENABLESECURITYFIXALERT=false'.

I made a Dockerfile that actually patches out the spying in the binary using sed, rather than figure out how to rebuild it without it or trust that the env vars work. See: https://github.com/caprover/one-click-apps/blob/master/publi...


CE. Thanks for the tip




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: