Hi Hideki,
On Wed, Feb 14, 2018 at 11:34:07PM +0900, Hideki Yamane wrote:
> On Sun, 11 Sep 2016 01:59:50 +0200 Ricardo Mones wrote:
> > > Without disabling auto update check feature, it seems that it is better to
> > > disable auto update check configuration only. attached patch disables it
> > >
On Sun, 11 Sep 2016 01:59:50 +0200 Ricardo Mones wrote:
> > Without disabling auto update check feature, it seems that it is better to
> > disable auto update check configuration only. attached patch disables it
> > by default. It makes that user can enable it by clicking manually
> > configuratio
> FYI: During update check process, sylpheed access to
> http://sylpheed.sraoss.jp/version.txt
> and provides the following information only.
>
> * os (win or linux or other)
> * version
Without disabling auto update check feature, it seems that it is better to
disable
auto update check config
> This version of sylpheed appears to phone home to some server, and
> performs a version check.
>
> Doing the version check alone leaks information about the user (at a
> minimum, that they are running Sylpheed, and their IP address). This is
> a security problem.
FYI: During update check proc
Package: sylpheed
Version: 3.5.0~beta1~r3426-1
Severity: normal
Dear Maintainer,
This version of sylpheed appears to phone home to some server, and
performs a version check.
Doing the version check alone leaks information about the user (at a
minimum, that they are running Sylpheed, and their IP
5 matches
Mail list logo
