found 779803 0.8.10-3
forwarded 779803 https://smuxi.im/issues/show/541
thanks

Smuxi should either use a dialog that allows to a) not connect/join or b)
allow the change the realname before the connect. As a quick fix the
realname should be anonymized.

On Sun, Aug 23, 2015 at 1:35 PM, Jonathan Wiltshire <j...@debian.org> wrote:

> Control: severity -1 grave
> Control: tag -1 security
>
> Justification: user information disclosure without warning
>
> On Wed, Mar 04, 2015 at 05:30:44PM -0500, Stéphane Fillion wrote:
> > At first start, smuxi autoconnect to a random irc server end then on this
> > server on two random channels, against my will and using my own username.
> >
> > Can you please correct that and make sure smuxi performs only actions the
> > user intends?
>
> Worse than that, smuxi joins oftc/#smuxi, an open channel, with the user's
> full name, without warning and without giving the user any opportunity to
> suppress that.
>
> --
> Jonathan Wiltshire                                      j...@debian.org
> Debian Developer                         http://people.debian.org/~jmw
>
> 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
>
>


-- 
Best regards,

Mirco (meebey) Bauer

FOSS Hacker             mee...@meebey.net  https://www.meebey.net/
Debian Developer        mee...@debian.org  http://www.debian.org/
GNOME Foundation Member mmmba...@gnome.org http://www.gnome.org/
CTO @ GSD Software Design GmbH m.ba...@gsd-software.net
.NET Foundation Advisory Council Member    http://www.dotnetfoundation.org/
PGP-Key ID              0xEEF946C8         https://meebey.net/pubkey.asc

Reply via email to