Report forwarded
to debian-bugs-dist@lists.debian.org, Miriam Ruiz <little_miry@yahoo.es>: Bug#584334; Package calibre.
(Thu, 03 Jun 2010 09:54:05 GMT) (full text, mbox, link).
Acknowledgement sent
to Michael Below <mbelow@antithese.de>:
New Bug report received and forwarded. Copy sent to Miriam Ruiz <little_miry@yahoo.es>.
(Thu, 03 Jun 2010 09:54:05 GMT) (full text, mbox, link).
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: calibre: sends information to upstream author on startup
Date: Thu, 03 Jun 2010 11:51:10 +0200
Package: calibre
Version: 0.6.54+dfsg-1
Severity: normal
According to http://status.calibre-ebook.com/ the program contacts
the upstream author on each start and sends the IP and the program
version. The IP is stored. This is a violation of privacy, at
least according to german law. Companies like Microsoft
are universally criticized if their software is found out to "phone
home", and free software should do this right:
This feature should be disabled by default, to be enabled by the
user like popcon etc. In addition, it should be mentioned in the
documentation.
Thanks
Michael Below
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages calibre depends on:
ii calibre-bin 0.6.54+dfsg-1 e-book converter and library manag
ii graphicsmagick-image 1.3.5-6 image processing tools providing I
ii python 2.5.4-9 An interactive high-level object-o
ii python-beautifulsoup 3.1.0.1-2 error-tolerant HTML parser for Pyt
ii python-cherrypy3 3.1.2-1 Python web development framework -
ii python-cssutils 0.9.6-1 CSS Cascading Style Sheets parser
ii python-dateutil 1.4.1-3 powerful extensions to the standar
ii python-dbus 0.83.1-1 simple interprocess messaging syst
ii python-django-taggin 0.3.1-1 A generic tagging application for
ii python-encutils 0.9.6-1 Encoding detection collection for
ii python-imaging 1.1.7-1+b1 Python Imaging Library
ii python-lxml 2.2.6-1 pythonic binding for the libxml2 a
ii python-mechanize 0.1.11-1.1 stateful programmatic web browsing
ii python-pkg-resources 0.6.10-4 Package Discovery and Resource Acc
ii python-pypdf 1.12-3 PDF toolkit implemented solely in
ii python-qt4 4.7.3-1 Python bindings for Qt4
ii python2.6 2.6.5-1 An interactive high-level object-o
ii ttf-liberation 1.05.2.20091019-4 Fonts with the same metrics as Tim
ii xdg-utils 1.0.2+cvs20100307-1 desktop integration utilities from
calibre recommends no packages.
calibre suggests no packages.
-- no debconf information
Reply sent
to Martin Pitt <mpitt@debian.org>:
You have taken responsibility.
(Thu, 17 Jun 2010 21:42:06 GMT) (full text, mbox, link).
Notification sent
to Michael Below <mbelow@antithese.de>:
Bug acknowledged by developer.
(Thu, 17 Jun 2010 21:42:06 GMT) (full text, mbox, link).
Hello Michael,
Michael Below [2010-06-03 11:51 +0200]:
> According to http://status.calibre-ebook.com/ the program contacts
> the upstream author on each start and sends the IP and the program
> version. The IP is stored. This is a violation of privacy, at
> least according to german law. Companies like Microsoft
> are universally criticized if their software is found out to "phone
> home", and free software should do this right:
I checked the code, and the only thing that the upstream version does
is to check the home page for new versions. However, we have disabled
that function in Debian/Ubuntu pretty much from day one, so it's not
an issue in Debian unless you manually start with --update-check.
Martin
--
Martin Pitt | http://www.piware.de
Ubuntu Developer (www.ubuntu.com) | Debian Developer (www.debian.org)
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.