Project

General

Profile

Bug #6343

List potentially identifying information sent in Whisperback reports

Added by mercedes508 almost 6 years ago. Updated 2 months ago.

Status:
In Progress
Priority:
Normal
Assignee:
Category:
-
Target version:
-
Start date:
03/01/2014
Due date:
% Done:

0%

Feature Branch:
Type of work:
Research
Blueprint:
Starter:
No
Affected tool:
WhisperBack

Description

Whisperback includes potentially identifying information in its bug reports, such as MAC address.
Listing them in order to then get rid of those would make bug reports less identifying.


Related issues

Related to Tails - Bug #6391: Wi-Fi AP MAC address should be anonymized in Whisperback debugging info Resolved 10/29/2013
Related to Tails - Feature #7796: More user control over Whisperback information Rejected 08/19/2014
Related to Tails - Bug #6769: Some serial numbers are not removed in WhisperBack reports In Progress 03/01/2014
Related to Tails - Bug #6571: Sanitize IPv6 addresses in WhisperBack In Progress 03/02/2014

History

#1 Updated by mercedes508 almost 6 years ago

  • Starter changed from No to Yes

#2 Updated by intrigeri almost 6 years ago

  • Category set to 174
  • Status changed from New to Confirmed

#3 Updated by alant almost 6 years ago

  • Status changed from Confirmed to In Progress

WhisperBack is already supposed to clean such info.

Please see sanitize_hardware_info an whisperBack/utils.py

I can't find any serial number nor MAC addresses in the info sent by WhisperBack on 0.20.1.

#4 Updated by intrigeri over 5 years ago

alant wrote:

I can't find any serial number nor MAC addresses in the info sent by WhisperBack on 0.20.1.

#6391 shows there's leaked info in some cases, so it could be worth looking in more depth to find others.

#5 Updated by intrigeri over 5 years ago

FWIW, I don't get the task / subtasks structure of this set of tickets. Fixing identified issues being a child ticket of identifying such issues makes no sense to me. No big deal anyway.

#6 Updated by BitingBird over 5 years ago

  • Starter changed from Yes to No

#7 Updated by intrigeri about 5 years ago

intrigeri wrote:

FWIW, I don't get the task / subtasks structure of this set of tickets. Fixing identified issues being a child ticket of identifying such issues makes no sense to me.

Alan, I suggest you clean up this once 1.1 is out (and a few subtasks of this one are resolved, which should make things a bit simpler). Don't hesitate asking me for help or guidance if you have a doubt about the Redmine semantics :)

#8 Updated by intrigeri almost 5 years ago

  • Assignee set to alant

Alan, ping regarding sorting the Redmine situation out :)

#9 Updated by intrigeri almost 5 years ago

  • Related to Feature #7796: More user control over Whisperback information added

#10 Updated by intrigeri over 3 years ago

  • Related to Bug #6769: Some serial numbers are not removed in WhisperBack reports added

#11 Updated by intrigeri over 3 years ago

  • Related to Bug #6571: Sanitize IPv6 addresses in WhisperBack added

#12 Updated by intrigeri 2 months ago

SOSCleaner (Debian ITP) could be a good source of inspiration. Who knows, we might even be able to use some of its code. And perhaps sosreport (in Debian Stretch and Buster) could replace some of our custom code?

Also available in: Atom PDF