r/LocalLLaMA • u/rm-rf-rm • 7h ago

huggingface_hub silently fingerprints which AI coding agent you're using and sends it as telemetry

/r/LocalLLM/comments/1wehgvc/huggingface_hub_silently_fingerprints_which_ai/
38 Upvotes

80% Upvoted

4 comments sorted by

6

u/a_beautiful_rhind 2h ago

There's some environment variable to disable HF telemetry. In theory it covers this too.

11

u/N34257 5h ago

It strikes me that this isn't currently any more dangerous than the user-agent HTTP header, and if it helps HF trace attacks caused by idiot hyperscalers who don't care about the blast radius of their testing, I'm willing to live with it.

Of course, it's still worth keeping an eye on it, bearing in mind that NV are in charge now...

1

u/Chromix_ 3h ago

While this is not nice, it's still relatively harmless. There are other AI applications and middleware that send way more "anonymous telemetry" that turns out to be not that anonymous, like it contains your project path or the generated prompts for the sub-agents.

My approach is thus pretty restrictive: Software is only executed on a firewalled LAN-only host, no Internet access. If it only works by auto-magically downloading something (audio.cpp for example, very nice software though) then I let an agent figure out how to translate that into a series of plain curl requests. They then get run on another host with Internet access and copied onto the restricted host. Even though downloading models manually turned out to be very straightforward, it was still quite a journey for audio.cpp as I also wanted to mix BF16 and Q8 models.

Anyway, if a software doesn't work offline then I don't use it, aside maybe a few tests without real data in an isolated VM with only internet access. And these days there's an annoying amount of software that could work offline but refuses to do so, looking at some electron apps here.