- The data continues to return to Chinese servers even with turned off telemetry
- Hardware and operating system specifications, mouse/keyboard activity and more
- The use of the Bring memory is 3 times greater than the cursor
A developer has led Github to warn that the IDE promoted by BRAYA by Bytedance has been collecting data from users and sending them to the servers of the Chinese company.
A report found an extensive network activity that continues despite users who disable telemetry in the configuration, with about 500 calls from the network observed in seven minutes, which is equivalent to transferring around 26 MB of data.
The data were engaging by the Bytedonce servers in the byteoversea[.]Com Domain, with a wide range of system information and project potentially at risk of being collected by the company.
BYTADANCE IDE could be collecting data
According to the report, the Bytedance compiled system information, such as hardware specifications and operating system details, use patterns, performance metrics, project and file route information, unique persistent identifiers and mouse/keyboard activity, among other elements.
The developer also found that Bytedance has the potential to enable/disable the function or modify the functionality remotely without promoting updates.
Marketing as a free alternative to cursor tastes, BRY uses GPT-4O and Claude-3.5-Sonnet to help users increase productivity, but it was discovered that the application used about three times more memory than the cursor (and 6.3x vs. code).
The greatest privacy and safety refers to the center and sovereignty of the data, with the main alarm bells on the persistent collection of information from Bytedance, even after users change their preferences. The developer was also concerned about the amount of unnecessary information of the system collected in these records, and the fact that everything was sent to Chinese infrastructure.
Bytedonce customers also share transparency concerns, and the IDE does not properly reveal the data collected and the alternation of telemetry seems not to be functional.
Techradar Pro He has asked Bytedance to respond to these accusations, but we do not receive an immediate response.
