[Pkg-matrix-maintainers] Bug#927842: matrix-synapse: Lintian privacy-breach-generic warnings

[Willem Mulder]

Hi,

On Wed, 24 Apr 2019 02:44:33 +0000 Linda Lapinlampi <linda at lindalap.fi>
wrote:

> […]
>
> Since matrix.org infrastructure rebuild recently, the last of images of
> matrix.org are now also 404 Not Found. vector.im images have rotted away
> for a longer time. For the first 9 <img> tags, would we just remove
> those lines with a patch? (This may also benefit the upstream, if
> forwarded.)

These seem to be for notification emails. I think it would be preferred
if these images were embedded in the mails, if we can recover these
images (which also removes the annoying external images notification in
email clients).

> ReCAPTCHA script on static/client/register/index.html I'd guess is the
> deprecated Matrix Console client, and so probably unused? I get it it's
> not installed by default anymore (Bug#923574), so could we remove it
> with a mention in NEWS file about this (unavailable code)?

Seems like this is for the sign-up page (if sign-up is enabled). I'm
unsure what the proper course of action would be; Google requires the
script to be loaded from their servers, but the ReCAPTCHA is quite
effective against spam sign-ups.

Kind regards,

Willem Mulder


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-matrix-maintainers/attachments/20190506/6ddd9755/attachment.sig>