[Popcon-developers] Bug#634474: popularity-contest: improve privacy by randomizing order of entries in all-popcon-results.gz?

Bill Allombert Bill.Allombert at math.u-bordeaux1.fr
Tue Jul 19 10:04:26 UTC 2011


On Tue, Jul 19, 2011 at 03:08:46AM +0300, Timo Juhani Lindfors wrote:
> Package: popularity-contest
> Version: 1.49
> Severity: wishlist
> 
> http://popcon.debian.org/all-popcon-results.gz
> 
> lists all my locally created packages together:
> 
> This means that if somebody knows that I have installed "saturn" and
> "qubes-os-core" they can easily derive that I also have installed all
> the packages that are listed between them.
> 
> Would it be possible to randomize the order of entries?

Please check tomorrow if this bug has gone away. 

Thanks for finding this rather serious leak,
-- 
Bill. <ballombe at debian.org>

Imagine a large red swirl here. 





More information about the Popcon-developers mailing list