[Bug 1583388] Re: Information about Ubuntu system automatically written to iPod

[Marc Deslauriers]

** Information type changed from Private Security to Public Security

** Changed in: util-linux (Ubuntu)
       Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to util-linux in Ubuntu.
https://bugs.launchpad.net/bugs/1583388

Title:
  Information about Ubuntu system automatically written to iPod

Status in util-linux package in Ubuntu:
  Triaged

Bug description:
  On Xubuntu 16.04, I connected an iPod Nano 5th Generation (8 GB) to my
  computer. After working on the files on the iPod from within the
  terminal for a while, I found that the almost 21 MB file
  /media/username/DEVICENAME/iPod_Control/iTunes/iTunesControl contained
  sensitive information about my Ubuntu system, such as my username,
  commands that I had run recently, commands that I had run a long time
  ago, the full paths of some of those commands, environment variables,
  my UID, and text that appeared in my terminal window (such as the
  prompt, which included a path that I was on; it even included ANSI
  escape sequences for the prompt).

  I've attached the output of `strings iTunesControl`, with my username,
  hostname, and the iPod device name changed.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: mount 2.27.1-6ubuntu3
  ProcVersionSignature: Ubuntu 4.4.0-22.40-generic 4.4.8
  Uname: Linux 4.4.0-22-generic x86_64
  ApportVersion: 2.20.1-0ubuntu2
  Architecture: amd64
  CurrentDesktop: XFCE
  Date: Wed May 18 20:12:03 2016
  EcryptfsInUse: Yes
  InstallationDate: Installed on 2013-04-04 (1140 days ago)
  InstallationMedia: Lubuntu 12.10 "Quantal Quetzal" - Release amd64 (20121017.1)
  SourcePackage: util-linux
  UpgradeStatus: Upgraded to xenial on 2016-03-25 (54 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/util-linux/+bug/1583388/+subscriptions