Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4820

Re: Which Debian packages leak information to the network?

Show all headers | View raw

On 5/18/16, Holger Levsen <holger@layer-acht.org> wrote:
> On Wed, May 18, 2016 at 06:33:52PM +0200, Jakub Wilk wrote:
>> Could you explain how any of these tools leak any information "without a
>> user's consent/expectation"?
>
> gnome-calculator contacts a web page/service with currency exchange
> information *on every start*, I think that's a good example of the kind
> of programs Patrick is looking for.


Ah, good one for developing a train of thought.. Instantly made me
think of my weather app which reaches out to the Netherlands very
regularly to garner its information. It would seemingly be disclosing
a user chosen location to gather what it needs, but perhaps not. I
(shamefully) don't know, *grin*.

And there used to be a package install/uninstall documenting
"popularity" program somewhere along the lines that I THINK was
reporting back very quietly in the background. I can't remember what
distro had that but it caused an understandable stink (an extended
disgruntled discussion). Mentioning this one in case it likewise stirs
up thoughts of anything operating similarly these days..

Just thinking out loud... :)

Cindy :)

-- 
Cindy-Sue Causey
Talking Rock, Pickens County, Georgia, USA

* runs with duct tape *

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Which Debian packages leak information to the network? Patrick Schleizer <adrelanos@riseup.net> - 2016-05-18 18:00 +0200
  Re: Which Debian packages leak information to the network? Jakub Wilk <jwilk@debian.org> - 2016-05-18 18:40 +0200
    Re: Which Debian packages leak information to the network? Holger Levsen <holger@layer-acht.org> - 2016-05-18 19:00 +0200
      Re: Which Debian packages leak information to the network? "georg@riseup.net" <georg@riseup.net> - 2016-05-19 02:00 +0200
        Re: Which Debian packages leak information to the network? Paul Wise <pabs@debian.org> - 2016-05-19 06:00 +0200
      Re: Which Debian packages leak information to the network? Cindy-Sue Causey <butterflybytes@gmail.com> - 2016-05-19 17:50 +0200
      Re: Which Debian packages leak information to the network? Patrick Schleizer <adrelanos@riseup.net> - 2016-05-19 18:10 +0200
        Re: Which Debian packages leak information to the network? "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2016-05-19 18:30 +0200
      Re: Which Debian packages leak information to the network? donoban <donoban@riseup.net> - 2016-05-20 10:40 +0200
        Re: Which Debian packages leak information to the network? Elmar Stellnberger <estellnb@gmail.com> - 2016-05-20 11:00 +0200
          Re: Which Debian packages leak information to the network? ale <ale@wwb.cc> - 2016-05-20 11:30 +0200
            Re: Which Debian packages leak information to the network? donoban <donoban@riseup.net> - 2016-05-20 12:00 +0200
            Re: Which Debian packages leak information to the network? Jakub Wilk <jwilk@debian.org> - 2016-05-20 18:20 +0200
  Re: Which Debian packages leak information to the network? Paul Wise <pabs@debian.org> - 2016-05-19 18:50 +0200
    Re: Which Debian packages leak information to the network? Weber <kweber33@gmx.de> - 2016-05-20 03:50 +0200
      Re: Which Debian packages leak information to the network? Geert Stappers <stappers@stappers.nl> - 2016-05-20 08:30 +0200
    Re: Which Debian packages leak information to the network? Paul Wise <pabs@debian.org> - 2016-05-20 04:50 +0200

csiph-web