[Bug 1935076] Re: ubuntu-bug sends huge amounts of internal data to public bugs without asking for permission

[Henning Sprang]

On Tue 10. Aug 2021 at 22:21, Seth Arnold <1935076 at bugs.launchpad.net>
wrote:

> dmesg in bug reports is fantastically helpful: it is a very fast and
> reliable way to diagnose many classes of hardware problems or filesystem
> flaws or kernel module incompatibilities that show up to the user as
> bugs in their programs. Having it available has saved both developers
> and users a *lot* of time.


I cannot tell for sure about the overall amount of bugs in Launchpad, but
in my own 25 years of software development i dont see how generally
requesting dmesg for each and every bug report would have been necessary or
helpful.

For my concrete situation and launchpad reports, i can tell that at the
same time i havent even got any answer for any bug i reported about
thunderbird so far… so its not even looked at by maintainers but available
to the whole world. (No complain, theres sure enough to do besides caring
for a single users rare issues! Only an observation from my perspective)

But yeah, there might be insights that i am lacking that make it a good
fit.

Im not going to insist in changes if you see it as  necessary the way it
is. I know what to do to work around  it now.

Thanks :)

-- 
Henning Sprang
http://www.sprang.de

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apport in Ubuntu.
https://bugs.launchpad.net/bugs/1935076

Title:
  ubuntu-bug sends huge amounts of internal data to public bugs without
  asking for permission

Status in apport package in Ubuntu:
  Confirmed

Bug description:
  I just created a bug with "ubuntu-bug -w" as recommeneded by the bug
  reporting guidelines.

  After creating it, I saw that without my confirmations many files with
  detailed output about my machine, ip and process environments and
  connected hardware etc have been collected, uploaded to launchpad and
  made publicly visible without my permission, and without any
  possibility to remove it again and select myself what I want to
  disclose.

  This is a serious security and privacy issue opinion.

  Please tell me ASAP how I can delete m,y data that I do not want to be
  publicly available.

  ProblemType: Bug
  DistroRelease: Ubuntu 20.10
  Package: apport-gtk 2.20.11-0ubuntu50.7
  ProcVersionSignature: Ubuntu 5.8.0-59.66-lowlatency 5.8.18
  Uname: Linux 5.8.0-59-lowlatency x86_64
  ApportVersion: 2.20.11-0ubuntu50.7
  Architecture: amd64
  CasperMD5CheckResult: skip
  CrashReports:
   644:1000:124:0:2021-07-08 04:45:57.713189974 +0200:2021-07-08 04:45:57.713189974 +0200:/var/crash/_usr_bin_jackd.1000.upload
   640:1000:124:173589:2021-07-08 04:45:57.713189974 +0200:2021-07-08 04:45:57.713189974 +0200:/var/crash/_usr_bin_jackd.1000.crash
   600:118:124:37:2021-07-08 04:46:00.914606508 +0200:2021-07-08 04:46:00.906605467 +0200:/var/crash/_usr_bin_jackd.1000.uploaded
  CurrentDesktop: ubuntu:GNOME
  Date: Thu Jul  8 21:01:23 2021
  ExecutablePath: /usr/share/apport/apport-gtk
  InstallationDate: Installed on 2020-04-12 (451 days ago)
  InstallationMedia: Ubuntu 19.10 "Eoan Ermine" - Release amd64 (20191017)
  InterpreterPath: /usr/bin/python3.8
  PackageArchitecture: all
  Python3Details: /usr/bin/python3.8, Python 3.8.10, python3-minimal, 3.8.6-0ubuntu1
  PythonDetails: /usr/bin/python2.7, Python 2.7.18, python-is-python2, 2.7.17-4
  SourcePackage: apport
  UpgradeStatus: Upgraded to groovy on 2020-11-03 (247 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1935076/+subscriptions