#13154: https://trac.torproject.org/projects/tor/wiki/WikiFormattingDebian's "popularity contest" package as threat vector? -------------------------------------+------------------------------------- Reporter: saint | Owner: saint Type: project | Status: closed Priority: Medium | Milestone: Component: Applications/Tor | Version: Tor: 0.3.0.0-alpha- bundles/installation | dev Severity: Major | Resolution: fixed Keywords: tor-hs, Debian, Stormy | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: Sponsor4 -------------------------------------+------------------------------------- Changes (by satiroloko):
* version: => Tor: 0.3.0.0-alpha-dev * type: enhancement => project * sponsor: => Sponsor4 Comment: Replying to [ticket:13154 saint]: > I am wondering whether to force-uninstall Debian's `popularity- contest` package as part of Stormy's installation process. It would be good to have an idea how popular Stormy is, but on the other hand, I'm not sure how anonymous the reporting is on Debian's end. > > This is also relevant for users of the `tor` package, who might also be at mild risk (though far less so because the number of users is so high, and doesn't reveal location of location-hidden services). > > Anyone have opinions on this? I'm leaning towards checking if popularity-contest is installed and then asking if the user would like it to be removed. > > EDIT: We should also discuss whether to remove it as part of Tor's installation process overall. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13154#comment:11> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs