Jeffrey Paul

``` sneak  nostromo-2  ~  http -j post https://api.steemit.com jsonrpc=2.0 id=1 method=account_history_api.get_ops_in_block params:='{"block_num": 2889020, "only_virtual": false}' HTTP/1.1 200 OK Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Connection:...

Note that this bug's description is scoped too narrowly: it appears to send the requests on *first launch*, when you've never logged in anywhere. (These statements are based on @turt2live's...

Sure, but if the default config is for `matrix.org`, then "config validation" is a form of accidental telemetry. Is it absolutely required that config validation hit the network?

> It is categorically not intended to be telemetry I appreciate that. The military intelligence spies don't, and slurp it up anyway. :) Thank you for prioritizing this! Lots of...

Per #13942, it also connects to vector.im and riot.im, for a total of *three* unauthorized/unnecessary connections, even when just launched and sitting at the login/signup screen. I've filed this as...

Why are there any product requirements for network access before the user has instructed the client to do anything, sitting at the login screen?

If that's the policy, I think it's unreasonable in that case for the default config to assume that I want to use those three third-party services without asking me first.

Is that a polite way of telling me "fork it if you don't like it to connect to servers you don't want to talk to automatically on startup without notice...

I'm talking about the product being a de-facto client for matrix.org, not my usage. I can rip all of this telemetry out of the client and rebuild it if I...

Well, if the config is non-default, that seems like a reasonable approach, as the user or their distributor has explicitly configured things. In the 99.9% case where a user has...