solidarity with ppl in rojava is a user on todon.nl. You can follow them or interact with them if you have an account anywhere in the fediverse.
solidarity with ppl in rojava @paulfree14

What does mean with 'analytics'? google analytics? ๐Ÿ˜ฑ

todon.nl/media/67J2Sb40t3J1B_w

ยท Mastalab ยท 2 ยท 1

@paulfree14 I think it's only registering your IP and things like that (it's in their Privacy Policy). But it's not matrix, but Riot.im server who does it

@paulfree14 They added this selection right before GDPR. Presumably they were silently doing analytics before that.
@paulfree14 You'd think that given that Matrix/Riot is quite modern - mostly written in the last couple of years - that they wouldn't use Google analytics because we now understand the full horrors of Google.

Sure enough, the Riot android app uses Google analytics.

I'll need to check into this more to see what it's actually doing and whether it's turned off.

@paulfree14

@bob
i filled an issue 1.5yrs ago exposing ganalytics on riot.im and thry keep on insisting? creepy. :facepalm:

@ajeremias @paulfree14 It does look like Google analytics was removed but that some residual references to it remain in the codebase and manifest. They do still use Google Cloud Messaging, but I don't think that's enabled in the f-droid version.

@bob

@paulfree14
just search for 'google' on their repo... scary stuff...

@paulfree14 At least for the web version they use an selfhosted Matomo instance but I haven't checked it for the app.

@paulfree14
yeah im already halfway migrated to xmpp... riot/matrix is a profit based company... they make their code as hardcoded, so it does not work in a federated world. later ill share here a list of known scary security issues with riot/marrix. #fckriot.im

@r3vlibre
true, but I was wrong with asuming it's about matrix, it's about the app called riot. (not shure if matrix is behind that development too)
@matrix

@paulfree14

@r3vlibre @matrix
yeah they all receive the paychek from the same company this new vector ltd... i also will expose matrix flaws... i only have the link in the computer... im on the phone :/

@paulfree14 Well, no. Mostly a hosted Matomo and Prometheus iirc. These were once opt-out but never were completely silent; people complained and they switched it to opt-in.