kcm_privacy module doesn't clear Konqueror's faviconrc and web history

Bug #215030 reported by AleksanderAdamowski
4
Affects Status Importance Assigned to Milestone
KDE Base
Unknown
Medium
kdebase (Ubuntu)
Won't Fix
Wishlist
Unassigned

Bug Description

The file ~/.kde/share/apps/konqueror/faviconrc is a privacy-sensitive file almost as much as browsing history, since it contains a list of all visited sites that featured a favicon. The history file at ~/.kde/share/apps/konqueror/konq_history is even more sensitive as it contains the browsing history.

As such, their contents should be cleared when "Favourite Icons" and "Web History" are selected for cleanup in privacy KDE Control Module.

However, when the user issues "kcmshell privacy", and selects all web browsing items, then clicks "Clean Up", they are left intact. Moreover, if the user deletes the faviconrc file by hand, it will be *recreated* (!!!) when KDE session ends because it's maintained in memory and flushed to disk at KDE session shutdown. In order to clean up faviconrc, the user has to leave KDE and only when there's no KDE session running (e.g. by logging in on on VGA console), he has to delete ~/.kde/share/apps/konqueror/faviconrc.

This is a serious privacy issue, as the privacy control module doesn't do what it suggests it is doing, and in addition the current logic of KDE makes cleaning up by hand much harder than one would possibly expect.

When cleaning up, the privacy KDE control module should immediately clean up both the on disk and in-memory representations of web browsing history and favicons.

Revision history for this message
In , Maciej Pilichowski (bluedzins) wrote :

Version: (using KDE KDE 3.5.7)

Description says "clear...", since no data is really cleared I assume that "clear..." means "keep". Please, fix this -- change the words, or change the checkboxes.

And while talking about the labeling, please change "clean up" to "clear all data" -- to use the same verb and make it clear it is about to clear all data, not only selected (right?).

Revision history for this message
In , Me-ngeefk4xayt3t4u9watah405veq (me-ngeefk4xayt3t4u9watah405veq) wrote :

I don't see the problem. The description tells the effect when you have toggled the option. Which means: clear it if option foo is enabled.

Revision history for this message
In , Maciej Pilichowski (bluedzins) wrote :

I can see only one problem -- if "clear" really means "clear", that it does not work at all. It does not clear anything, so it is a bug in execution, not naming. Reopening.

Revision history for this message
In , Maciej Pilichowski (bluedzins) wrote :

PS. To be sure I am catching the idea of the Privacy feature -- is it automatic or manual? I assumed it is both.

Revision history for this message
In , Me-ngeefk4xayt3t4u9watah405veq (me-ngeefk4xayt3t4u9watah405veq) wrote :

OK, there seems to be some bug in execution. Often it works like it describes, sometimes it does not (tested with Konqueror History).

Revision history for this message
AleksanderAdamowski (aadamowski) wrote :

Forgot to specify the versions. I'm testing on Ubuntu Gutsy, with kcontrol 4:3.5.8-0ubuntu2.2.

Revision history for this message
Yuriy Kozlov (yuriy-kozlov) wrote :

Thank you for filing this bug. It seems indeed that clearing web history doesn't clear the history at all, so I can confirm this.

This is not very high priority since this module is not included in Kubuntu's System Settings.

Changed in kdebase:
status: New → Confirmed
Revision history for this message
Yuriy Kozlov (yuriy-kozlov) wrote :
Changed in kdebase:
status: Unknown → New
Revision history for this message
AleksanderAdamowski (aadamowski) wrote :

They indeed seem related. Voted for the upstream bugs (both).

Revision history for this message
In , Bugs-kde-3 (bugs-kde-3) wrote :

Confirming.

See also this bug filed for Ubuntu:
https://bugs.launchpad.net/ubuntu/+source/kdebase/+bug/215030

May it be related to Konqueror instances that are kept in memory? I've noticed that if I delete ~/.kde/share/apps/konqueror/konq_history and ~/.kde/share/apps/konqueror/faviconrc during my KDE session, and then log out, those files are recreated with the previous content. The only explanation I can think of is that the in-memory Konqueror instance preserves that information and flushes it to disk when it exists (which occurs at the end of the KDE session).

Changed in kdebase:
importance: Undecided → Wishlist
Changed in kdebase:
status: Confirmed → Triaged
Revision history for this message
Jonathan Thomas (echidnaman) wrote :

Hello there,

Kubuntu currently does not have the manpower necessary to implement this feature as a distribution, so we are closing this report. Worry not, though, because your wish item is still being tracked by KDE at http://bugs.kde.org/show_bug.cgi?id=148457 . Once KDE implements this feature, we will include it in the Kubuntu release which contains the KDE version the feature was implemented in.

Thanks for understanding, and have a nice day.

Changed in kdebase (Ubuntu):
status: Triaged → Won't Fix
Changed in kdebase:
importance: Unknown → Medium
Revision history for this message
In , Andrew-crouthamel (andrew-crouthamel) wrote :

Hello! Sorry to be the bearer of bad news, but this project has been unmaintained for many years so I am closing this bug. Kcontrol has been replaced by System Settings in Plasma. Please give the latest version of that a try, and open a new bug in "systemsettings" if you continue to have an issue. Thank you!

Changed in kde-baseapps:
status: New → Unknown
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.