Sent from Outlook for Android<https://aka.ms/AAb9ysg> Hi there, My name is Shaun and I work in an organisation where one of our users wishes to install the R software and our process is to assess the safety of anyone software prior to authorisation. I can?t seem to locate all the information that we require on the webpage, so could someone kindly advise me of the following information please? 1. Please can you confirm what user information the software collects (E.g. Name, password, e-mail address, any Personally Identifiable Information etc)? 2. If any is collected, please can you confirm if the information collected by the software stays locally on the device or if it is transferred anywhere. If it is transferred, could you please advise where it is transferred to (E.g. your own servers, or a third party data centre such as Amazon Web Services or Azure)? 3. Are there any third-party components installed within the software and, if so, are these also kept up-to-date? If you could kindly advise this information, it would be really appreciated, thank you ? Shaun [[alternative HTML version deleted]]
1. R is open source software. You are welcome to review the source code of the R interpreter for handling of PII. No warranty is offered by the (volunteer) developers of R. 2. R software is a programming interpreter, which by definition allows for a wide range of behaviours. Users of R frequently share useful scripts and compilable source code that they have written in the form of packages. There are multiple repositories of such packages online... it is up to the consumer of any such contributed package to evaluate whether it is fit for the desired purpose. 3. See 2. Whether specific packages are out of date or not depends on the rigor of the person sharing their package... it is up to the consumer to evaluate fitness for purpose. FWIW I have never encountered an R package that collected PII. But I have only used a few hundred out of the tens of thousands available, so YMMV. On August 17, 2023 4:10:58 AM PDT, Shaun Parr <portvale_fc at hotmail.com> wrote:> > >Sent from Outlook for Android<https://aka.ms/AAb9ysg> > > >Hi there, > >My name is Shaun and I work in an organisation where one of our users wishes to install the R software and our process is to assess the safety of anyone software prior to authorisation. I can?t seem to locate all the information that we require on the webpage, so could someone kindly advise me of the following information please? > >1. Please can you confirm what user information the software collects (E.g. Name, password, e-mail address, any Personally Identifiable Information etc)? >2. If any is collected, please can you confirm if the information collected by the software stays locally on the device or if it is transferred anywhere. If it is transferred, could you please advise where it is transferred to (E.g. your own servers, or a third party data centre such as Amazon Web Services or Azure)? >3. Are there any third-party components installed within the software and, if so, are these also kept up-to-date? > >If you could kindly advise this information, it would be really appreciated, thank you ? > > >Shaun > > [[alternative HTML version deleted]] > >______________________________________________ >R-help at r-project.org mailing list -- To UNSUBSCRIBE and more, see >https://stat.ethz.ch/mailman/listinfo/r-help >PLEASE do read the posting guide http://www.R-project.org/posting-guide.html >and provide commented, minimal, self-contained, reproducible code.-- Sent from my phone. Please excuse my brevity.
This is a volunteer Help list for users of R, which is open source, so you can see all its code. I can answer no to your questions, unless you are using one of R's innumerable packages that interacts with the internet and to which the user may give personal information to enable the desired functionality (logins, etc.). But of course how do you know that I am not some malevolent agent or organization wishing to mislead you for my own nefarious purposes? Cheers, Bert On Thu, Aug 17, 2023 at 8:37?AM Shaun Parr <portvale_fc at hotmail.com> wrote:> > > Sent from Outlook for Android<https://aka.ms/AAb9ysg> > > > Hi there, > > My name is Shaun and I work in an organisation where one of our users > wishes to install the R software and our process is to assess the safety of > anyone software prior to authorisation. I can?t seem to locate all the > information that we require on the webpage, so could someone kindly advise > me of the following information please? > > 1. Please can you confirm what user information the software collects > (E.g. Name, password, e-mail address, any Personally Identifiable > Information etc)? > 2. If any is collected, please can you confirm if the information > collected by the software stays locally on the device or if it is > transferred anywhere. If it is transferred, could you please advise where > it is transferred to (E.g. your own servers, or a third party data centre > such as Amazon Web Services or Azure)? > 3. Are there any third-party components installed within the software and, > if so, are these also kept up-to-date? > > If you could kindly advise this information, it would be really > appreciated, thank you ? > > > Shaun > > [[alternative HTML version deleted]] > > ______________________________________________ > R-help at r-project.org mailing list -- To UNSUBSCRIBE and more, see > https://stat.ethz.ch/mailman/listinfo/r-help > PLEASE do read the posting guide > http://www.R-project.org/posting-guide.html > and provide commented, minimal, self-contained, reproducible code. >[[alternative HTML version deleted]]
?s 12:10 de 17/08/2023, Shaun Parr escreveu:> > > Sent from Outlook for Android<https://aka.ms/AAb9ysg> > > > Hi there, > > My name is Shaun and I work in an organisation where one of our users wishes to install the R software and our process is to assess the safety of anyone software prior to authorisation. I can?t seem to locate all the information that we require on the webpage, so could someone kindly advise me of the following information please? > > 1. Please can you confirm what user information the software collects (E.g. Name, password, e-mail address, any Personally Identifiable Information etc)? > 2. If any is collected, please can you confirm if the information collected by the software stays locally on the device or if it is transferred anywhere. If it is transferred, could you please advise where it is transferred to (E.g. your own servers, or a third party data centre such as Amazon Web Services or Azure)? > 3. Are there any third-party components installed within the software and, if so, are these also kept up-to-date? > > If you could kindly advise this information, it would be really appreciated, thank you ? > > > Shaun > > [[alternative HTML version deleted]] > > ______________________________________________ > R-help at r-project.org mailing list -- To UNSUBSCRIBE and more, see > https://stat.ethz.ch/mailman/listinfo/r-help > PLEASE do read the posting guide http://www.R-project.org/posting-guide.html > and provide commented, minimal, self-contained, reproducible code.Hello, 1. R itself? None. Download from CRAN and install. There are OS related installation issues, namely authorization but that information is not asked for nor recorded by R. 2. The answer to "If any is collected" is already given above. 3. I am not sure I understand this point. R comes with third-party components and their developers try to keep them up-to-date. This has nothing to do with PII. CRAN is the main official repository for contributed packages. From [1]: Available Packages Currently, the CRAN package repository features 19955 available packages. and the R instruction available.packages() |> nrow() # [1] 19931 says a number close to that one. Those packages are developed and contributed by volunteers and it's impossible for the CRAN maintainers to check what exactly those packages do but those packages' source code must be submited and anyone willing to check them can. [1] https://cran.r-project.org/web/packages/ Hope this helps, Rui Barradas