[tor-bugs] #13154 [- Select a component]: Debian's "popularity contest" package as threat vector?

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#13154: Debian's "popularity contest" package as threat vector?
------------------------------------+---------------------
 Reporter:  saint                   |          Owner:
     Type:  enhancement             |         Status:  new
 Priority:  normal                  |      Milestone:
Component:  - Select a component    |        Version:
 Keywords:  tor-hs, Debian, Stormy  |  Actual Points:
Parent ID:                          |         Points:
------------------------------------+---------------------
 I am wondering whether to force-uninstall Debian's `popularity-contest`
 package as part of Stormy's installation process.  It would be good to
 have an idea how popular Stormy is, but on the other hand, I'm not sure
 how anonymous the reporting is on Debian's end.

   This is also relevant for users of the `tor` package, who might also be
 at mild risk (though far less so because the number of users is so high,
 and doesn't reveal location of location-hidden services).

   Anyone have opinions on this?  I'm leaning towards checking if
 popularity-contest is installed and then asking if the user would like it
 to be removed.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13154>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs