On Thu, Dec 26, 2019 at 11:26:26AM +0100, Tomas Pospisek wrote:
> > are there any requirements or restriction what a program packaged in
> > Debian is allowed to do when starting up? Calibre is normally doing the
> > following checks:
> > - check for updates of itself
> > - check for updates of plugins
> > - send UID, OS, program version, and the icon theme selected in the
> > program to the statistic site [1]
> >
> > Which of the above actions are acceptable for Debian/main?
> >
> > [1] https://calibre-ebook.com/dynamic/calibre-usage
>
> The last point seems inacceptable to me if the user hasn't explicitly
> consented to it. Checking for updates might be annoying but is "OK" to me.
Considering this is debian, I'd probably say that none of those are
acceptable without a proper consent for the user. Opt-in flags in the
preference windows about "automatically checks for (plugins|program)
updates at startup" would do it….
Silently sending out details like UID, OS, etc is a no-go in my mind
though.
See also the history of chromium that had to patch away similar
features.
--
regards,
Mattia Rizzolo
GPG Key: 66AE 2B4A FCCF 3F52 DA18 4D18 4B04 3FCD B944 4540 .''`.
More about me: https://mapreri.org : :' :
Launchpad user: https://launchpad.net/~mapreri `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia `-
Attachment:
signature.asc
Description: PGP signature