[Pkg-mozext-maintainers] Privacy Badger packaging maintenance

John Scott jscott at posteo.net
Sun Dec 5 19:16:12 GMT 2021


Hi,

I would first like to apologize. I've been adamant in the past about my
interest in maintaining Privacy Badger, but I haven't followed through
on it.

As someone that doesn't understand the WebExtensions ecosystem, or how
they are to be installed system-wide, and has also not been able to
find good documentation on exactly how these packages are constructed
(how do you know what to install where?), it doesn't feel right to
blindly run 'uupdate' without understanding how a package works.
Fortunately, I've not been doing this.

Perhaps it's just not my thing and I should divert my attention to
other packages. If no one expresses interest in 30 days, I will request
that Privacy Badger be removed from all suites.

The reason, and what anyone looking to take this package on should bear
in mind, is that although upstream hasn't divulged a lot of details, it
has apparently been found that Privacy Badger's classical way of
working can make fingerprinting worse. Privacy Badger now uses data
about websites that are aggregated from users, so that all users'
browsers behave uniformly. The con is that if one is using an old
version of Privacy Badger, this too can contribute to fingerprinting.

Upstream, mostly for these reasons, requests its removal from Debian if
it is not kept up with upstream releases in Debian, including in Debian
stable. I think that like ClamAV data, a good case can be made that it
belongs in stable-updates.

Thanks for everything you do, and happy hacking.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-mozext-maintainers/attachments/20211205/9f635836/attachment.sig>


More information about the Pkg-mozext-maintainers mailing list