Your message dated Thu, 27 Nov 2014 22:18:50 +0000 with message-id <e1xu7ok-00040g...@franck.debian.org> and subject line Bug#771110: fixed in greasemonkey 2.2-2 has caused the Debian Bug report #771110, regarding xul-ext-greasemonkey: privacy breach: phones home after first installation to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 771110: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771110 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: xul-ext-greasemonkey Version: 2.2-1 Severity: important Tags: patch Hi, The first time the browser is started after installing xul-ext-greasemonkey it loads http://www.greasespot.net/p/welcome.html?utm_source=xpi&utm_medium=xpi&utm_campaign=welcome&utm_content=2.2 This is a privacy breach. The following patch removes the code that phones home (applies to 2.3-1 too). --------------------------------------------------------------- diff --git a/content/config.js b/content/config.js index abce40c..f4f8626 100644 --- a/content/config.js +++ b/content/config.js @@ -276,20 +276,6 @@ Config.prototype._updateVersion = function() { // Update the stored current version so we don't do this work again. GM_prefRoot.setValue("version", newVersion); - - if ("0.0" == oldVersion) { - // This is the first launch. Show the welcome screen. - var chromeWin = GM_util.getBrowserWindow(); - // If we found it, use it to open a welcome tab. - if (chromeWin && chromeWin.gBrowser) { - var url = 'http://www.greasespot.net/p/welcome.html' - + '?utm_source=xpi&utm_medium=xpi&utm_campaign=welcome' - + '&utm_content=' + newVersion; - // the setTimeout makes sure we do not execute too early -- sometimes - // the window isn't quite ready to add a tab yet - chromeWin.setTimeout(chromeWin.GM_BrowserUI.openTab, 100, url); - } - } })); }; --------------------------------------------------------------- Thanks for considering, dam -- System Information: Debian Release: jessie/sid APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=bg_BG.UTF-8, LC_CTYPE=bg_BG.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages xul-ext-greasemonkey depends on: ii iceweasel 32.0-1 xul-ext-greasemonkey recommends no packages. xul-ext-greasemonkey suggests no packages. -- debconf-show failed
--- End Message ---
--- Begin Message ---Source: greasemonkey Source-Version: 2.2-2 We believe that the bug you reported is fixed in the latest version of greasemonkey, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 771...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Damyan Ivanov <d...@debian.org> (supplier of updated greasemonkey package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 27 Nov 2014 22:02:45 +0000 Source: greasemonkey Binary: xul-ext-greasemonkey Architecture: source all Version: 2.2-2 Distribution: unstable Urgency: medium Maintainer: Debian Mozilla Extension Maintainers <pkg-mozext-maintainers@lists.alioth.debian.org> Changed-By: Damyan Ivanov <d...@debian.org> Description: xul-ext-greasemonkey - customization of webpages with user scripts Closes: 771110 Changes: greasemonkey (2.2-2) unstable; urgency=medium . * Team upload . * patch content/config.js to stop calling home on first run (Closes: #771110) Loading an external page upon first run is a privacy breach. The information on the "welcome" page is also available in the menu of the toolbar button which is installed automatically. Checksums-Sha1: 38a92f1e6635db4e4c1503f99024d2755b95c378 2014 greasemonkey_2.2-2.dsc 551c026225bb4cccd7e9772857ecab671ba3b981 31672 greasemonkey_2.2-2.debian.tar.xz ecd23ff04642c600de9c3e625647576e7460fc2c 165186 xul-ext-greasemonkey_2.2-2_all.deb Checksums-Sha256: ecfed6d6dd12fddfa2616667c4313c21fa7436b0ae99e17bc6de522498ba7a34 2014 greasemonkey_2.2-2.dsc b1884e1afb38b46adcf562fb19bbaceb22c078d5483a72f157a91a5607f175ec 31672 greasemonkey_2.2-2.debian.tar.xz d7915fa9349f14d2e007e00f89bfb50533e305ba6b26e469443e09bb4edadd1e 165186 xul-ext-greasemonkey_2.2-2_all.deb Files: f4a970c3dfe3a640f736a8012f43e6da 2014 web optional greasemonkey_2.2-2.dsc 0bf9e5864af87bbb0b047723c5c84ee3 31672 web optional greasemonkey_2.2-2.debian.tar.xz a23235dcd684495bff46ce1de1e1c83c 165186 web optional xul-ext-greasemonkey_2.2-2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJUd6C1AAoJENu+nU2Z0qAEu4cP/ixoqjhLuez6Bfvr7PN/1LUX 1pJYOYfmwxZgP/a3SMzNlE3sHCm49b71KbTz+dc9NwXbhN0N4vDm4mEske7qxkPF dg/u9o/44K+fHeHsksEFB2wPMg+Icev+8NmYI1JsZG9pPgb2t4cYZElIkvArk2bF 2y2KpX+YCmKzkVPGFirKpOe643dnh2fPSZ9pX9bRm9GYnAXkFLP5NMbqD9XZ5tZG FP5Iz4/2PnCKtht+SNwA/zlHKSxHm0lCf8l/xClK4A2HIU+iTQs6WHSh+CQg8VlM TtuBf3eehQf1G1YC6yQjzL1LfcT+5yNKwqMnwdVOknH69C27eLoIA8GLY4EuJzuW vHXfjopOC43AaaurK4G+mfQ1cLiFrSxGtdC4OwkLkRptFnpH+ZdsjdKrG5ESNL2s cMrVq4By3IuRAO66XZvs85ZdkE9BJRG08txBGDnnM5sL3DSzysT/wMxWeS9fNV6L UZ6RqlDTHsKynC9Fw/ke7eWQZFiur+XDtgdD2K/0uZvLsgnG+X61IELcxxf6ttxj X4kyOwiLe9M9xM6Lldq4UTUfGF4wIkd8UJCsQe22KXhBhgywKQUJSJX/g4GT6Zk5 OOulQr6i/V8JKxnGJNP8qDyHXqTTv7Va3NWOB9oD/zFvVFV7ULZqePYVNoGktVwd 6r3XW0kx8cSCR9Zfn1aI =EN3m -----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________ Pkg-mozext-maintainers mailing list Pkg-mozext-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mozext-maintainers
