> If apport (the interacting with the user part) knows the password(s)
that could be in any attachment it can scrub them.

How should it? There isn't a single place which holds/knows all your
passwords, secret projects, personal data, and other sensitive stuff,
except maybe your brain.

> The real solution here is to allow users to prevent an attachment from
being included with an apport report.

Then such bug reports would loose everything that a developer needs to
actually look into the problem. We could basically just say "program foo
has crashed".

-- 
should try to sanitize passwords from attachments
https://bugs.launchpad.net/bugs/107103
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to