ByteDance's Cursor-rivaling AI editor 'Trae IDE' turns out to send user data to a server and have an unusually large number of processes



'

Trae IDE ' is a code editor developed by TikTok's ByteDance based on Visual Studio Code (VSCode), and is touted for its free AI coding assistance features. Analysis results for Trae IDE have been released, including 'an unusually large number of processes' and 'collecting user information.'

GitHub - segmentationf4u1t/trae_telemetry_research
https://github.com/segmentationf4u1t/trae_telemetry_research

Trae IDE is a code editor with AI coding assistance. Like the popular Cursor, it is developed based on VSCode, and its main feature is that it offers free coding assistance using Claude 3.5 and GPT-4.



There have been reports that Trae IDE has too many processes. The image below shows the number of processes for Trae IDE, VSCode, and Cursor, from left to right. Compared to VSCode, Cursor has two more processes, and Trae IDE has even more.



The number of processes and memory usage for Trae IDE, VSCode, and Cursor are summarized below. Trae IDE has an unusually large number of processes, and memory usage is more than five times that of VSCode.

Apps Number of processes Memory usage
VSCode 9 Up to 0.9GB
Cursor 11 Up to 1.9GB
Trae IDE 33 Up to 5.7GB


In addition, network monitoring revealed that Trae IDE periodically connects to ByteDance's servers and sends information such as 'hardware configuration,' 'OS,' 'active time,' 'session duration,' 'resource consumption status,' 'unique identifiers such as machine ID and user ID,' 'project information,' and 'obfuscated file paths.' Even when telemetry was disabled in the settings, the information transmission to the server continued.



After the discoverer reported the problem on Discord, the number of processes was significantly reduced, but the collection of user data was not fixed. Instead, the word 'track' was designated as a NG word, and a mechanism was introduced to the Discord server that automatically mutes users for seven days if they mention tracking.

in Software,   Security, Posted by log1o_hf