On Thu, Dec 26, 2019 at 11:26:26AM +0100, Tomas Pospisek wrote: > > are there any requirements or restriction what a program packaged in > > Debian is allowed to do when starting up? Calibre is normally doing the > > following checks: > > - check for updates of itself > > - check for updates of plugins > > - send UID, OS, program version, and the icon theme selected in the > > program to the statistic site [1] > > > > Which of the above actions are acceptable for Debian/main? > > > > [1] https://calibre-ebook.com/dynamic/calibre-usage > > The last point seems inacceptable to me if the user hasn't explicitly > consented to it. Checking for updates might be annoying but is "OK" to me.
Considering this is debian, I'd probably say that none of those are
acceptable without a proper consent for the user. Opt-in flags in the
preference windows about "automatically checks for (plugins|program)
updates at startup" would do it….
Silently sending out details like UID, OS, etc is a no-go in my mind
though.
See also the history of chromium that had to patch away similar
features.
--
regards,
Mattia Rizzolo
GPG Key: 66AE 2B4A FCCF 3F52 DA18 4D18 4B04 3FCD B944 4540 .''`.
More about me: https://mapreri.org : :' :
Launchpad user: https://launchpad.net/~mapreri `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia `-
signature.asc
Description: PGP signature
