mmg configuration "check for new versions online" defaults to ON (should be OFF)

Bug #1014229 reported by MMlosh on 2012-06-17
18
This bug affects 2 people
Affects Status Importance Assigned to Milestone
mkvtoolnix (Ubuntu)
Undecided
Unassigned

Bug Description

mkvtoolnix gui checks for new versions online.
The check can be disabled in configuration, but it's enabled by default (pointless if installed via a package manager)
It should default to OFF.

Under some conditions it causes even crashes (filling as separate bug #1014236)

MMlosh (mmlosh) on 2012-06-17
description: updated
description: updated
Moritz Bunkus (moritz-bunkus) wrote :

As Ubuntu's officially packaged version often lacks five or six releases behind and as the original author ( = me) provides his own repository with current Ubuntu packages I don't really see this as pointless. Also the update checker lists the relevant portions of the MKVToolNix change log, something you don't get with Ubuntu's package manager.

Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in mkvtoolnix (Ubuntu):
status: New → Confirmed
Zakhar (alainb06) wrote :

MMlosh points out the privacy issue that occurs with the current configuration being ON by default without the user having explicitly opted-in.

This is a fact (not an opinion!).
Although the request to get the XML is super clean (checked with wireshark) it still leaks the user's IP to bunkus.org

Having regrets on the fact that Ubuntu is not handled in "rolling-release" mode is an not a fact... it is an opinion, and should be discussed on forums and not here.

Yet, the function is indeed useful, as this features allows to know within the application itself, whether there is a new version and what it does better. But still, as that goes through the internet, I do agree with MMlosh -opinion-: it should be OFF by defaut for the sake of privacy.

Yuv (yuv) wrote :

@Moritz: Thanks for the great software. Easy fix to the concern expressed in this bug report while keeping the software up to date and possibly saving your time and resources: start a PPA on Launchpad. Then you only need to upload the most recent source code package to Launchpad and it builds and distributed the binaries for you. Users who add your PPA to their software sources get updated automatically. Best of both worlds?

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Duplicates of this bug

Other bug subscribers