Comment 14 for bug 1701068

Timothy R. Chavez (timrchavez) wrote :

I don't know if this should be a separate issue, but while investigating this issue and learning about motd-news, I stumbled across this in the code https://gist.github.com/anonymous/fdc1cab8cb193ca19aa4c663c1ebd1f5#file-gistfile1-txt-L245 -- While I applaud the creativity, I don't think it's right for Canonical to be collecting server information into the USER_AGENT and curl'ing it back to motd.ubuntu.com. First, it's completely non-obvious. No one would be the wiser that Canonical is collecting this information if they weren't actually looking at the code. Second, you have to opt-out of it. Third, by opting out of it, you're also forced to opt out of critical information about vulnerabilities, distro EOL messages, etc. In this way, we're sort of having to "buy" motd-news with information about our servers. That should be spelled out somewhere, at the very least.