Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4824

Re: Which Debian packages leak information to the network?

Show all headers | View raw

hi

this is a very good plan.


my idea:

- make a new "info table" for all packages

"privacy data used by app "

- what exact meta data

- who gets the data ; if third who?

- how long ist the data saved and in which country



-->  write to all developers an email ,and ask them to fill out the
tables for their packages .Now and in future.


If they will not  do it , make a button "unsafe" or else...

This job should do the programmer,and a team
should control if their inputs are correct.


Ps.

This idea was sent to google and Mozilla ,too
But they dont want to write this infos to PLAY or Firefox Apps .
Because then users could see,what data is sniffed and will perhaps
stop millions to use it...

You know , privacy is not really wanted from some companies...

cheers


Am 19.05.2016 um 18:42 schrieb Paul Wise:
> On Wed, May 18, 2016 at 11:50 PM, Patrick Schleizer wrote:
> 
>> Hello we are a privacy-centric distro based on Debian and wanted to know
>> what Debian packages leak information about the system to the network
>> without a user's consent/expectation.
> 
> Debian probably needs a privacy team to audit all packages that send
> data to the network and develop mitigation, configuration or patches
> to counter these.
> 

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Which Debian packages leak information to the network? Patrick Schleizer <adrelanos@riseup.net> - 2016-05-18 18:00 +0200
  Re: Which Debian packages leak information to the network? Jakub Wilk <jwilk@debian.org> - 2016-05-18 18:40 +0200
    Re: Which Debian packages leak information to the network? Holger Levsen <holger@layer-acht.org> - 2016-05-18 19:00 +0200
      Re: Which Debian packages leak information to the network? "georg@riseup.net" <georg@riseup.net> - 2016-05-19 02:00 +0200
        Re: Which Debian packages leak information to the network? Paul Wise <pabs@debian.org> - 2016-05-19 06:00 +0200
      Re: Which Debian packages leak information to the network? Cindy-Sue Causey <butterflybytes@gmail.com> - 2016-05-19 17:50 +0200
      Re: Which Debian packages leak information to the network? Patrick Schleizer <adrelanos@riseup.net> - 2016-05-19 18:10 +0200
        Re: Which Debian packages leak information to the network? "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2016-05-19 18:30 +0200
      Re: Which Debian packages leak information to the network? donoban <donoban@riseup.net> - 2016-05-20 10:40 +0200
        Re: Which Debian packages leak information to the network? Elmar Stellnberger <estellnb@gmail.com> - 2016-05-20 11:00 +0200
          Re: Which Debian packages leak information to the network? ale <ale@wwb.cc> - 2016-05-20 11:30 +0200
            Re: Which Debian packages leak information to the network? donoban <donoban@riseup.net> - 2016-05-20 12:00 +0200
            Re: Which Debian packages leak information to the network? Jakub Wilk <jwilk@debian.org> - 2016-05-20 18:20 +0200
  Re: Which Debian packages leak information to the network? Paul Wise <pabs@debian.org> - 2016-05-19 18:50 +0200
    Re: Which Debian packages leak information to the network? Weber <kweber33@gmx.de> - 2016-05-20 03:50 +0200
      Re: Which Debian packages leak information to the network? Geert Stappers <stappers@stappers.nl> - 2016-05-20 08:30 +0200
    Re: Which Debian packages leak information to the network? Paul Wise <pabs@debian.org> - 2016-05-20 04:50 +0200

csiph-web