Bug#613273: vinagre connecting to remote IP addresses

[Gary Koskenmaki]

On Wed, 2011-02-16 at 19:45 +0100, Josselin Mouette wrote:
> Le dimanche 13 février 2011 à 12:25 -0800, Gary Koskenmaki a écrit : 
> > Package: vinagre
> > Version: 2.30.3-1
> > Severity: normal
> > 
> > vinagre is phoning home upon being enabled.  It is connecting to IP
> > addresses that resolve to .br domains.  What's with this?  I consider
> > this to be a major security problem.

> 
> This looks like a real problem (only by analyzing it will we know
> whether it is some stupidity or “a major security problem”) but you’ll
> need to be more specific than that if you want it fixed.
> 
What do you need too know?   

There's a link to how I discovered this problem below this paragraph.
After reading and participating in this thread I enabled desktop sharing
on my own laptop and sniffed network traffic at the same time.  That's
how I discovered the network traffic going out upon enabling desktop
sharing.  At first I didn't believe vinagre was the problem as I'd used
it some time back(3 or 4 years ago, or more) and it had not behaved this
way back then.  

http://www.dslreports.com/forum/r25446313-Ubuntu-computer-hijacked-by-hacker