Your message dated Wed, 10 Jul 2024 19:21:20 -0400
with message-id
<CAD+GYvxkQbyAQ_HtfSnRaXowuHumc_8viKUOA3rpULe9pa=r...@mail.gmail.com>
and subject line Re: Bug#898479: [gnome] gnome-software should detach fwupd as
a dependency
has caused the Debian Bug report #898479,
regarding [gnome] gnome-software should detach fwupd as a dependency
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
898479: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898479
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: gnome
Severity: normal
gnome-software depends on fwupd which triggers web requests containing
"client user-agent, IP address, timestamp, OS distribution name and OS
version to fwupd.org upon each firmware downloading process (or
checking for firmware updates manually by the user)" without the
knowledge of the user. The metadata is downloaded from a CDN hosted by amazon.
https://fosspost.org/analytics/privacy-security-concern-regarding-gnome-software
Please follow the suggestions of above article:
"We believe the following should be taken into consideration to solve
the issues above:
GNOME Software should detach fwupd as a dependency. Because if
fwupd package is installed, it will auto-check for updates in the
background (fwupd daemon will autostart after boot) and it will
send the data to fwupd.org automatically.
GNOME Software should disable the service of using fwupd.org for
firmware updates by default. Users wishing to subscribe to such
service should opt-in their selves.
Upon activation of fwupd service, a privacy policy dialog should be
displayed telling users about what’s going to be collected and why."
Thanks!
--- End Message ---
--- Begin Message ---
This was done in gnome-software 46.0-2 which split
gnome-software-fwupd into a separate package and made it a Recommends
only.
Thank you,
Jeremy Bícha
--- End Message ---
