Public bug reported:

In https://bugs.launchpad.net/ubuntu/+source/gnome-
shell/+bug/1739525/comments/4, I ran apport-collect for that bug report.

To my horror, it posted "org.gnome.shell command-history" and "favorites" in 
the "GsettingsChanges.txt"!
https://launchpadlibrarian.net/349970997/GsettingsChanges.txt

It's _completely_ reasonable to see:
 * enabled-extensions
 * org.gnome.shell.* diffs
 * org.gnome.desktop.* diffs

But it is _NOT_ acceptable (privacy reasons) to automatically harvest a
user's favorites in the gnome-shell, nor their command histories.

_IF_ we must harvest for bug-data gathering, it MUST come in a secure
mechanism that is private only to submitter + the assigned dev.

** Affects: apport (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: apport privacy

** Description changed:

  In https://bugs.launchpad.net/ubuntu/+source/gnome-
  shell/+bug/1739525/comments/4, I ran apport-collect for that bug report.
  
- To my horror, it posted "org.gnome.shell command-history" in the 
"GsettingsChanges.txt"!
+ To my horror, it posted "org.gnome.shell command-history" and "favorites" in 
the "GsettingsChanges.txt"!
  https://launchpadlibrarian.net/349970997/GsettingsChanges.txt
  
  It's _completely_ reasonable to see:
-  * enabled-extensions
-  * org.gnome.shell.* diffs
-  * org.gnome.desktop.* diffs
+  * enabled-extensions
+  * org.gnome.shell.* diffs
+  * org.gnome.desktop.* diffs
  
  But it is _NOT_ acceptable (privacy reasons) to automatically harvest a
  user's favorites in the gnome-shell, nor their command histories.
  
  _IF_ we must harvest for bug-data gathering, it MUST come in a secure
  mechanism that is private only to submitter + the assigned dev.

** Summary changed:

- apport-collect SHOULD NOT collect gnome-shell command history
+ apport-collect SHOULD NOT collect gnome-shell command history and favorites

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1739531

Title:
  apport-collect SHOULD NOT collect gnome-shell command history and
  favorites

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1739531/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to