[Bug 2033133] [NEW] Privacy concern in auto generated UbiquitySyslog.txt: leaks all visible SSIDs, enabling geolocating user

[Leon]

Public bug reported:

When submitting a bug with "ubuntu-bug", it auto-uploads a
UbiquitySyslog.txt file which contains all the visible SSIDs. This is a
potential privacy concern as such information can be used to geolocate
the launchpad user.

Clicking "Don't send" just closes the dialog box and no browser window
is opened. I expected the browser window to still be opened even when I
click "don't send", or let me choose what to send.

ProblemType: Bug
DistroRelease: Ubuntu 23.10
Package: ubiquity (not installed)
ProcVersionSignature: Ubuntu 6.3.0-7.7-generic 6.3.5
Uname: Linux 6.3.0-7-generic x86_64
NonfreeKernelModules: zfs
ApportVersion: 2.27.0-0ubuntu2
Architecture: amd64
CasperMD5CheckResult: pass
CasperVersion: 1.482
CurrentDesktop: ubuntu:GNOME
Date: Sat Aug 26 04:48:15 2023
InstallCmdLine: BOOT_IMAGE=/casper/vmlinuz layerfs-path=standard.live.squashfs --- quiet splash
LiveMediaBuild: Ubuntu 23.10 "Mantic Minotaur" - Daily amd64 (20230825)
ProcEnviron:
 LANG=C.UTF-8
 PATH=(custom, no user)
 SHELL=/bin/bash
 XDG_RUNTIME_DIR=<set>
SourcePackage: ubiquity
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: ubiquity (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug mantic

** Attachment removed: "UbiquitySyslog.txt"
   https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/2033133/+attachment/5695119/+files/UbiquitySyslog.txt

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to ubiquity in Ubuntu.
https://bugs.launchpad.net/bugs/2033133

Title:
  Privacy concern in auto generated UbiquitySyslog.txt: leaks all
  visible SSIDs, enabling geolocating user

Status in ubiquity package in Ubuntu:
  New

Bug description:
  When submitting a bug with "ubuntu-bug", it auto-uploads a
  UbiquitySyslog.txt file which contains all the visible SSIDs. This is
  a potential privacy concern as such information can be used to
  geolocate the launchpad user.

  Clicking "Don't send" just closes the dialog box and no browser window
  is opened. I expected the browser window to still be opened even when
  I click "don't send", or let me choose what to send.

  ProblemType: Bug
  DistroRelease: Ubuntu 23.10
  Package: ubiquity (not installed)
  ProcVersionSignature: Ubuntu 6.3.0-7.7-generic 6.3.5
  Uname: Linux 6.3.0-7-generic x86_64
  NonfreeKernelModules: zfs
  ApportVersion: 2.27.0-0ubuntu2
  Architecture: amd64
  CasperMD5CheckResult: pass
  CasperVersion: 1.482
  CurrentDesktop: ubuntu:GNOME
  Date: Sat Aug 26 04:48:15 2023
  InstallCmdLine: BOOT_IMAGE=/casper/vmlinuz layerfs-path=standard.live.squashfs --- quiet splash
  LiveMediaBuild: Ubuntu 23.10 "Mantic Minotaur" - Daily amd64 (20230825)
  ProcEnviron:
   LANG=C.UTF-8
   PATH=(custom, no user)
   SHELL=/bin/bash
   XDG_RUNTIME_DIR=<set>
  SourcePackage: ubiquity
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/2033133/+subscriptions