Apport submitting identifiable data to launchpad
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| empathy (Ubuntu) |
New
|
Undecided
|
Unassigned | ||
Bug Description
When using apport to report a bug on launchpad, sometimes apport submits log files or setting files that may contain identifiable information (such as usernames, machine names, etc). In some cases it asks for permission, but even if you say no it may still submit a log that contains identifiable information.
Proposed solutions:
(1) Apport should scan all the files it is subimtting to make sure username/machine name is not in them; it shouldn't rely on third party programs to generate deidentified logs.
(2) Launchpad website should allow you to review the uploaded files BEFORE you submit the bug (in the same screen where you input the 'summary' and 'further information'. This way, the user has a chance to review the files, and modify them before making them publicly available.
