shuup/shuup-megastore-theme

Forced telemetry on default installation

Opened this issue · 0 comments

Telemetry is forced for default installations :) It takes 4-5 attempts to turn it off from the web GUI before it accepts. Even then, I got suspicious.

If you guys are smart enough to create a complex software, you are certainly able to understand 18 USC 2701: Unlawful Access to Stored Communications is a felony.

Append the following to the file settings.py

SHUUP_TELEMETRY_ENABLED = False
SHUUP_TELEMETRY_HOST_URL = "http://127.0.0.1"
SHUUP_MAX_DAYS_IN_TELEMETRY = 0

It may be a good security practice to block outbound connections to telemetry.shuup.com
It is also good security practice to monitor your web server logs to see any HTTP POST.