[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#777438: marked as done (gitg leaks privacy information to gravatar)

Your message dated Mon, 20 Feb 2017 13:28:39 +0100
with message-id <1487593719.12977.3.camel@kurtz.be>
and subject line Re: gitg leaks privacy information to gravatar
has caused the Debian Bug report #777438,
regarding gitg leaks privacy information to gravatar
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
777438: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777438
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: gitg
Version: 0.2.7-3
Severity: normal


Hi.

Apparently gitg uses gravatar (and others?) to query the
avatar of commiter/author addresses in repos, thereby
basically leaking privacy information...
This includes your current IP address (why the hell
should gravatar be able to track me all the time) and
likely also which repos I work on, at least when they're
public, it's likely that one can deduce from the querried
addresses on this


AFAICS, one cannot disable this, and even if, it shouldn't
be an opt-out.


Cheers,
Chris.

--- End Message ---
--- Begin Message --- 
Version: 3.23.0-1

Hi!

gitg now has an option (see attached screenshot) to control whether
Gravatar is used and this option defaults to "false" (see below).

	alexander@shepard:~$ grep -C5 gravatar /usr/share/glib-2.0/schemas/org.gnome.gitg.gschema.xml
	    <key type="s" name="default-activity">
	      <default>"history"</default>
	      <summary>Default Activity</summary>
	      <description>The activity which gitg activates by default when first launched.</description>
	    </key>
	    <key type="b" name="use-gravatar">
	      <default>false</default>
	      <summary>Use Gravatar</summary>
	      <description>Enable the use of gravatar to display user avatars.</description>
	    </key>
	    <key type="b" name="enable-monitoring">
	      <default>true</default>
	      <summary>Enable Monitoring</summary>
	      <description>Automatically update when external changes to .git are detected</description>
	alexander@shepard:~$ 

I'm therefore closing this bug now, but please feel free to reopen if
necessary!

Best regards

Alexander Kurtz

Attachment: gitg.png
Description: PNG image

Attachment: signature.asc
Description: This is a digitally signed message part


--- End Message ---
Reply to: