Bug#898479: [gnome] gnome-software should detach fwupd as a dependency

Jeremy Bicha jbicha at debian.org
Sat May 12 13:46:46 BST 2018


On Sat, May 12, 2018 at 8:00 AM, kardan <kardan at riseup.net> wrote:
> gnome-software depends on fwupd which triggers web requests containing
> "client user-agent, IP address, timestamp, OS distribution name and OS
> version to fwupd.org upon each firmware downloading process (or
> checking for firmware updates manually by the user)"  without the
> knowledge of the user. The metadata is downloaded from a CDN hosted by amazon.

Honestly, that sounds like visiting any web site in a browser. Should
we stop installing Firefox?

Checking for updates using apt also reveals that information.

> https://fosspost.org/analytics/privacy-security-concern-regarding-gnome-software

Did you read the replies from the fwupd maintainer, Richard Hughes?

I would actually argue that Debian GNOME should recommend fwupd like
most other distros do.

Thanks,
Jeremy Bicha



More information about the pkg-gnome-maintainers mailing list