Ubuntu
unity-scope-video-remote package

remote video scope doesn't full switch off traffic when privacy option switched on

Bug #1065686 reported by Alan Pope 🍺🐧🐱 🦄
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Unity Remote Videos scope
Fix Released
High
Unassigned
Unity Remote Videos scope 0.3.10 "Q SRU-0"
unity-scope-video-remote (Ubuntu)
Fix Released
High
David Callé
Ubuntu quantal-updates
Quantal
Fix Released
High
David Callé
Ubuntu quantal-updates

Bug Description

[IMPACT]

An privacy issue.

[TEST CASE]

1. Install wireshark
2. Set "Include online search results" setting to "Off"
3. Logout/login again or restart computer
4. Start wireshark and start capturing network data - http only
5. Open the lenses, switch to video scope, observe traffic to canonical servers (if any)

[REGRESSION POTENTIAL]

Minimal.

---

In 12.10 we now have a privacy option in system settings which is supposed to suppress outgoing requests to Canonical servers. Unfortunately the scope still makes a (harmless but unwanted) request to http://videosearch.ubuntu.com/v0/search?q=&sources=amazon as can be seen in the attached screenshot.

To reproduce

Install wireshark, set privacy option "Include online search results" to "Off".
Logout/login to get a clean session

Start wireshark, start capture and filter to show only http traffic.
Open the lenses
Observe traffic to canonical servers.

ProblemType: Bug
DistroRelease: Ubuntu 12.10
Package: unity-scope-video-remote 0.3.9-0ubuntu1
ProcVersionSignature: Ubuntu 3.5.0-17.28-generic 3.5.5
Uname: Linux 3.5.0-17-generic x86_64
ApportVersion: 2.6.1-0ubuntu3
Architecture: amd64
Date: Thu Oct 11 20:50:13 2012
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Alpha amd64 (20120102)
PackageArchitecture: all
SourcePackage: unity-scope-video-remote
UpgradeStatus: No upgrade log present (probably fresh install)

See original description
Revision history for this message
Alan Pope 🍺🐧🐱 🦄 (popey) wrote :
Revision history for this message
Benjamin Kerensa (bkerensa) wrote :

Ubuntu One does the same kind of harmless requests even if a user has not activated Ubuntu One at all.

Revision history for this message
Alan Pope 🍺🐧🐱 🦄 (popey) wrote :

Thanks for noticing Benjamin, do feel free to file a bug against the Ubuntu One client app for that, I think it's best to keep these separate bugs.

David Callé (davidc3)
Changed in unity-scope-video-remote (Ubuntu):
status: New → Confirmed
assignee: nobody → David Callé (davidc3)
Alan Pope 🍺🐧🐱 🦄 (popey)
Changed in unity-scope-video-remote (Ubuntu):
importance: Undecided → High
David Callé (davidc3)
Changed in unity-scope-video-remote (Ubuntu):
status: Confirmed → In Progress
Timo Jyrinki (timo-jyrinki)
Changed in unity-scope-video-remote:
milestone: none → 0.3.10
status: New → In Progress
importance: Undecided → High
Kate Stewart (kate.stewart)
Changed in unity-scope-video-remote (Ubuntu Quantal):
milestone: none → quantal-updates
Timo Jyrinki (timo-jyrinki)
description: updated
Didier Roche-Tolomelli (didrocks)
no longer affects: unity-scope-video-remote (Ubuntu R-series)
Timo Jyrinki (timo-jyrinki)
description: updated
Changed in unity-scope-video-remote:
status: In Progress → Fix Committed
Timo Jyrinki (timo-jyrinki)
Changed in unity-scope-video-remote:
status: Fix Committed → Fix Released
Revision history for this message
Chris Halse Rogers (raof) wrote : Please test proposed package

Hello Alan, or anyone else affected,

Accepted unity-scope-video-remote into quantal-proposed. The package will build now and be available at http://launchpad.net/ubuntu/+source/unity-scope-video-remote/0.3.10-0ubuntu1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please change the bug tag from verification-needed to verification-done. If it does not, change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Changed in unity-scope-video-remote (Ubuntu Quantal):
status: In Progress → Fix Committed
tags: added: verification-needed
Revision history for this message
Benjamin Kerensa (bkerensa) wrote :

That fixes it.

tags: added: verification-done
removed: verification-needed
Revision history for this message
Benjamin Kerensa (bkerensa) wrote :

Oh details:

So I have the results toggled off in privacy and can confirm no http or https connections are opened to videosearch.ubuntu.com

Revision history for this message
Steve Langasek (vorlon) wrote : Update Released

The verification of this Stable Release Update has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regresssions.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package unity-scope-video-remote - 0.3.10-0ubuntu1

---------------
unity-scope-video-remote (0.3.10-0ubuntu1) quantal-proposed; urgency=low

  * New upstream release.
    - Disable initial recommendations and sources requests when remote
      calls are not allowed (LP: #1065686)
 -- Timo Jyrinki <email address hidden> Fri, 12 Oct 2012 13:32:13 +0300

Changed in unity-scope-video-remote (Ubuntu Quantal):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package unity-scope-video-remote - 0.3.10daily12.12.05-0ubuntu1

---------------
unity-scope-video-remote (0.3.10daily12.12.05-0ubuntu1) raring; urgency=low

  [ Michael Terry ]
  * debian/control:
    - Update Vcs-Bzr
    - Bump from dh8 to dh9
  * debian/rules:
    - Use --fail-missing
  * Automatic snapshot from revision 56 (bootstrap)

  [ Automatic PS uploader ]
  * Automatic snapshot from revision 58
 -- Automatic PS uploader <email address hidden> Wed, 05 Dec 2012 09:29:22 +0000

Changed in unity-scope-video-remote (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.