Re: Which Debian packages leak information to the network?

2016-05-19 Thread Geert Stappers
On Fri, May 20, 2016 at 03:47:35AM +0200, Weber wrote: > Am 19.05.2016 um 18:42 schrieb Paul Wise: > > On Wed, May 18, 2016 at 11:50 PM, Patrick Schleizer wrote: > > > >> Hello we are a privacy-centric distro based on Debian and wanted to know > >> what Debian packages leak information about the s

Re: Which Debian packages leak information to the network?

2016-05-19 Thread Paul Wise
On Fri, May 20, 2016 at 12:42 AM, Paul Wise wrote: > Debian probably needs a privacy team to audit all packages that send > data to the network and develop mitigation, configuration or patches > to counter these. Looks like there are a few related teams but they are mostly about tools: https://w

Re: Which Debian packages leak information to the network?

2016-05-19 Thread Weber
hi this is a very good plan. my idea: - make a new "info table" for all packages "privacy data used by app " - what exact meta data - who gets the data ; if third who? - how long ist the data saved and in which country --> write to all developers an email ,and ask them to fill out the t

Re: Which Debian packages leak information to the network?

2016-05-19 Thread Paul Wise
On Wed, May 18, 2016 at 11:50 PM, Patrick Schleizer wrote: > Hello we are a privacy-centric distro based on Debian and wanted to know > what Debian packages leak information about the system to the network > without a user's consent/expectation. Debian probably needs a privacy team to audit all p

Re: Which Debian packages leak information to the network?

2016-05-19 Thread Adam D. Barratt
On 2016-05-19 17:03, Patrick Schleizer wrote: Holger Levsen: On Wed, May 18, 2016 at 06:33:52PM +0200, Jakub Wilk wrote: Could you explain how any of these tools leak any information "without a user's consent/expectation"? gnome-calculator contacts a web page/service with currency exchange i

Re: Which Debian packages leak information to the network?

2016-05-19 Thread Patrick Schleizer
Holger Levsen: > On Wed, May 18, 2016 at 06:33:52PM +0200, Jakub Wilk wrote: >> Could you explain how any of these tools leak any information "without a >> user's consent/expectation"? > > gnome-calculator contacts a web page/service with currency exchange > information *on every start*, I think t

Re: Which Debian packages leak information to the network?

2016-05-19 Thread Cindy-Sue Causey
On 5/18/16, Holger Levsen wrote: > On Wed, May 18, 2016 at 06:33:52PM +0200, Jakub Wilk wrote: >> Could you explain how any of these tools leak any information "without a >> user's consent/expectation"? > > gnome-calculator contacts a web page/service with currency exchange > information *on every

RE: Big Promotion 500lumen Solar Led light/ Jill

2016-05-19 Thread daisy
Dear Purchaser manager, It’s glad to tell you our Newest 500lumen Solar Led light, please kindly check picture as follows: Please reply me for more informations, thanks so much! Best regards, Jill Trade Manager: cn220236703 Skype account: jill1590 Whatsapp: 0086-13066801446 E

Re: Debian SHA-1 deprecation

2016-05-19 Thread Daniel Pocock
On 19/05/16 03:17, Paul Wise wrote: > On Wed, May 18, 2016 at 9:20 PM, Daniel Pocock wrote: > >> Can anybody comment on how Debian users will be impacted by SHA-1 >> deprecation? > > There is some info related to that in these two wiki pages: > > https://wiki.debian.org/SHA-1 The way that pa