[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: automatic package statistics
I don't like this idea unless it's off by default with an opt-in.
(and, as someone else pointed out, not using opt-in would give us
trouble with database privacy laws in some jurisdictions).
One nit: "uname -a" includes not just one, but two hostnames. Of the
uname flags, -n includes the hostname of the system, and our kernel
version format includes the username and hostname of the kernel
"uname -prs" would be less of a privacy invasion.
A more significant concern is that the server, and anyone in a
position to wiretap a significant fraction of the traffic destined to
it, could accumulate a list of who had which packages installed, and,
in the event that a security exploit in a package were uncovered, it
would be trivial to use that list to come up with a "hit list" of
systems to attack.
Main Index |
Thread Index |