This ticket should be updated to Security issue +250 points

I highly doubt that this Motd News "feature" is compliant with EU's
General Data Protection Regulation since daily reporting of computer's
infos are proceeded without the user's consent. Cf. GDPR application
comments [https://gdpr.eu/eu-gdpr-personal-data/], in particular with
respect to Recital 30 [https://gdpr.eu/recital-30-online-identifiers-
for-profiling-and-identification/]

Internet protocol (IP) addresses; information that is related to an
individual’s tools, applications, or devices, like their computer.

Daily report of computer's private infos without the users consent


It affects Ubuntu Servers and Desktop (including roaming computers like laptops)
since at least 18.04 LTS and also the current 20.04 LTS

Sensible data sent
- IP address of the computer running Ubuntu
- Date of the HTTPS query
- Kernel Version
- CPU Vendor and Model
- Uptime
- Cloud identifier
- Version of Curl so version of Ubuntu running ...

$curl_ver $lsb $platform $cpu $uptime $cloud_id

Sample from our PC Engines running Ubuntu 18.04 LTS:
```
curl/7.58.0-2ubuntu3.8 GNU/Linux/4.15.0-101-generic/x86_64 AMD/GX-412TC/SOC 
uptime/692518.54/2755023.47 cloud_id/unknown
```

https://motd.ubuntu.com/ 
```
 * MicroK8s gets a native Windows installer and command-line integration.

     https://ubuntu.com/blog/microk8s-installers-windows-and-macos
```

The perfect opportunity to map all Ubuntu Linux users worldwide on a
daily basis?

https://gdpr.eu/eu-gdpr-personal-data/
https://gdpr.eu/checklist/

See also
https://askubuntu.com/questions/1105825/why-lubuntu-18-04-calls-amazon-servers-motd-ubuntu-com

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1867424

Title:
  motd-news transmitting private hardware data without consent or
  knowledge in background

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/base-files/+bug/1867424/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to