Your message dated Mon, 20 Feb 2017 13:28:39 +0100
with message-id <[email protected]>
and subject line Re: gitg leaks privacy information to gravatar
has caused the Debian Bug report #777438,
regarding gitg leaks privacy information to gravatar
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
777438: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777438
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: gitg
Version: 0.2.7-3
Severity: normal
Hi.
Apparently gitg uses gravatar (and others?) to query the
avatar of commiter/author addresses in repos, thereby
basically leaking privacy information...
This includes your current IP address (why the hell
should gravatar be able to track me all the time) and
likely also which repos I work on, at least when they're
public, it's likely that one can deduce from the querried
addresses on this
AFAICS, one cannot disable this, and even if, it shouldn't
be an opt-out.
Cheers,
Chris.
--- End Message ---
--- Begin Message ---
Version: 3.23.0-1
Hi!
gitg now has an option (see attached screenshot) to control whether
Gravatar is used and this option defaults to "false" (see below).
alexander@shepard:~$ grep -C5 gravatar
/usr/share/glib-2.0/schemas/org.gnome.gitg.gschema.xml
<key type="s" name="default-activity">
<default>"history"</default>
<summary>Default Activity</summary>
<description>The activity which gitg activates by default when
first launched.</description>
</key>
<key type="b" name="use-gravatar">
<default>false</default>
<summary>Use Gravatar</summary>
<description>Enable the use of gravatar to display user
avatars.</description>
</key>
<key type="b" name="enable-monitoring">
<default>true</default>
<summary>Enable Monitoring</summary>
<description>Automatically update when external changes to .git
are detected</description>
alexander@shepard:~$
I'm therefore closing this bug now, but please feel free to reopen if
necessary!
Best regards
Alexander Kurtz
signature.asc
Description: This is a digitally signed message part
--- End Message ---
