Re: Which Debian packages leak information to the network?

2016-05-19 Thread Paul Wise
On Fri, May 20, 2016 at 12:42 AM, Paul Wise wrote: > Debian probably needs a privacy team to audit all packages that send > data to the network and develop mitigation, configuration or patches > to counter these. Looks like there are a few related teams but they are mostly about tools:

Re: Which Debian packages leak information to the network?

2016-05-19 Thread Weber
hi this is a very good plan. my idea: - make a new "info table" for all packages "privacy data used by app " - what exact meta data - who gets the data ; if third who? - how long ist the data saved and in which country --> write to all developers an email ,and ask them to fill out the

Re: Which Debian packages leak information to the network?

2016-05-19 Thread Paul Wise
On Wed, May 18, 2016 at 11:50 PM, Patrick Schleizer wrote: > Hello we are a privacy-centric distro based on Debian and wanted to know > what Debian packages leak information about the system to the network > without a user's consent/expectation. Debian probably needs a privacy team to audit all

Re: Which Debian packages leak information to the network?

2016-05-19 Thread Adam D. Barratt
On 2016-05-19 17:03, Patrick Schleizer wrote: Holger Levsen: On Wed, May 18, 2016 at 06:33:52PM +0200, Jakub Wilk wrote: Could you explain how any of these tools leak any information "without a user's consent/expectation"? gnome-calculator contacts a web page/service with currency exchange

Re: Which Debian packages leak information to the network?

2016-05-19 Thread Patrick Schleizer
Holger Levsen: > On Wed, May 18, 2016 at 06:33:52PM +0200, Jakub Wilk wrote: >> Could you explain how any of these tools leak any information "without a >> user's consent/expectation"? > > gnome-calculator contacts a web page/service with currency exchange > information *on every start*, I think

Re: Which Debian packages leak information to the network?

2016-05-19 Thread Cindy-Sue Causey
On 5/18/16, Holger Levsen wrote: > On Wed, May 18, 2016 at 06:33:52PM +0200, Jakub Wilk wrote: >> Could you explain how any of these tools leak any information "without a >> user's consent/expectation"? > > gnome-calculator contacts a web page/service with currency exchange

RE: Big Promotion 500lumen Solar Led light/ Jill

2016-05-19 Thread daisy
Dear Purchaser manager, It’s glad to tell you our Newest 500lumen Solar Led light, please kindly check picture as follows: Please reply me for more informations, thanks so much! Best regards, Jill Trade Manager: cn220236703 Skype account: jill1590 Whatsapp: 0086-13066801446

Re: Debian SHA-1 deprecation

2016-05-19 Thread Daniel Pocock
On 19/05/16 03:17, Paul Wise wrote: > On Wed, May 18, 2016 at 9:20 PM, Daniel Pocock wrote: > >> Can anybody comment on how Debian users will be impacted by SHA-1 >> deprecation? > > There is some info related to that in these two wiki pages: > > https://wiki.debian.org/SHA-1 The way that

External check

2016-05-19 Thread Raphael Geissert
CVE-2016-4429: RESERVED -- The output might be a bit terse, but the above ids are known elsewhere, check the references in the tracker. The second part indicates the status of that id in the tracker at the moment the script was run.