Music is always shared even if "share my music" is unselected in the daap plugin

Bug #1193382 reported by Stefan Handschuh
262
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Rhythmbox
Expired
Medium
rhythmbox (Ubuntu)
Incomplete
Undecided
Unassigned

Bug Description

Ubuntu 12.04.2
rhythmbox 2.96

In the standard installation of rhythmbox in ubuntu 12.04, the daap plugin is enabled. The default setting for "share my music" is unchecked such that I would expect my music not to be shared.
However, it is accessible through the local network.

I consider this as a security risk as there might be some very personal audio files that one does not want to share. Another potential risk may be the existence of fingerprints in some audio files which are bought legally from certain stores. If such files are getting uploaded somewhere else, this may lead to trouble for the initial user of rhythmbox.

This seems to be identical to gnome bug 663423 which I could not find here an therefore opened a new bug.

description: updated
information type: Private Security → Public Security
Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

I can confirm this on Precise, Quantal, Raring and Saucy.

Changed in rhythmbox:
importance: Unknown → Medium
status: Unknown → New
Changed in rhythmbox (Ubuntu):
status: New → Confirmed
Revision history for this message
Walter Garcia-Fontes (walter-garcia) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. We are sorry that we do not always have the capacity to look at all reported bugs in a timely manner. There have been many changes in Ubuntu since that time you reported the bug and your problem may have been fixed with some of the updates. It would help us a lot if you could test it on a currently supported Ubuntu version. When you test it and it is still an issue, kindly upload the updated logs by running apport-collect <bug #> and any other logs that are relevant for this particular issue.

Revision history for this message
vrishab (vrishab-in) wrote :

Not reproducible in latest rhythmbox ( 3.4.1 ).

System details:
--------------

bugs@ubuntu:~$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=16.10
DISTRIB_CODENAME=yakkety
DISTRIB_DESCRIPTION="Ubuntu 16.10"

bugs@ubuntu:~$ uname -a
Linux ubuntu 4.8.0-26-generic #28-Ubuntu SMP Tue Oct 18 14:39:52 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

Changed in rhythmbox:
status: New → Expired
crvi (crvi)
Changed in rhythmbox (Ubuntu):
status: Confirmed → Incomplete
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.