By the current design, you don't give choice to the Ubuntu users as they cannot 
opt-out BEFORE
the laptop or server contacts motd.ubuntu.com sending the telemetry. By 
implementing it as
essential package, you don't let user remove it but only disable it when it is 
too late.

The same apply to landscape, you don't give choice to disable some dangerous 
features 
like executing very powerful script, list all processes, etc. This is why, we 
decided to stop 
using landscape (both in the cloud and on premises).

It will be your responsibility as Ubuntu Server manager, if motd.ubuntu.com 
gets compromised
and motd-news is exploited because it runs curl as root and all Ubuntu servers 
could get
compromised at the same time within 12 hours.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1867424

Title:
  motd-news transmitting private hardware data without consent or
  knowledge in background

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/base-files/+bug/1867424/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to