Bug #6343

List potentially identifying information sent in Whisperback reports

Added by mercedes508 2013-10-07 07:01:39 . Updated 2020-03-08 18:57:57 .

Status:
In Progress
Priority:
Normal
Assignee:
Category:
Target version:
Start date:
2014-03-01
Due date:
% Done:

0%

Feature Branch:
Type of work:
Research
Blueprint:

Starter:
0
Affected tool:
WhisperBack
Deliverable for:

Description

Whisperback includes potentially identifying information in its bug reports, such as MAC address.
Listing them in order to then get rid of those would make bug reports less identifying.

Subtasks

Related issues

Related to Tails - Bug #6391: Wi-Fi AP MAC address should be anonymized in Whisperback debugging info Resolved 2013-10-29
Related to Tails - Feature #7796: More user control over Whisperback information Rejected 2014-08-19
Related to Tails - Bug #6769: Some serial numbers are not removed in WhisperBack reports In Progress 2014-03-01
Related to Tails - Bug #6571: Sanitize IPv6 addresses in WhisperBack In Progress 2014-03-02

History

#1 Updated by mercedes508 2013-10-07 07:12:30

  • Starter changed from No to Yes

#2 Updated by intrigeri 2013-10-07 10:15:40

  • Category set to 174
  • Status changed from New to Confirmed

#3 Updated by alant 2013-10-11 06:14:19

  • Status changed from Confirmed to In Progress

WhisperBack is already supposed to clean such info.

Please see sanitize_hardware_info an whisperBack/utils.py

I can’t find any serial number nor MAC addresses in the info sent by WhisperBack on 0.20.1.

#4 Updated by intrigeri 2013-11-02 11:52:40

alant wrote:
> I can’t find any serial number nor MAC addresses in the info sent by WhisperBack on 0.20.1.

Bug #6391 shows there’s leaked info in some cases, so it could be worth looking in more depth to find others.

#5 Updated by intrigeri 2014-03-04 14:53:40

FWIW, I don’t get the task / subtasks structure of this set of tickets. Fixing identified issues being a child ticket of identifying such issues makes no sense to me. No big deal anyway.

#6 Updated by BitingBird 2014-03-14 17:47:17

  • Starter changed from Yes to No

#7 Updated by intrigeri 2014-05-26 02:47:07

intrigeri wrote:
> FWIW, I don’t get the task / subtasks structure of this set of tickets. Fixing identified issues being a child ticket of identifying such issues makes no sense to me.

Alan, I suggest you clean up this once 1.1 is out (and a few subtasks of this one are resolved, which should make things a bit simpler). Don’t hesitate asking me for help or guidance if you have a doubt about the Redmine semantics :)

#8 Updated by intrigeri 2014-08-19 09:37:51

  • Assignee set to alant

Alan, ping regarding sorting the Redmine situation out :)

#9 Updated by intrigeri 2014-08-19 09:38:14

  • related to Feature #7796: More user control over Whisperback information added

#10 Updated by intrigeri 2015-12-02 04:10:53

  • related to Bug #6769: Some serial numbers are not removed in WhisperBack reports added

#11 Updated by intrigeri 2015-12-02 04:16:11

  • related to Bug #6571: Sanitize IPv6 addresses in WhisperBack added

#12 Updated by intrigeri 2019-05-08 06:01:45

SOSCleaner (Debian ITP could be a good source of inspiration. Who knows, we might even be able to use some of its code. And perhaps sosreport (in Debian Stretch and Buster) could replace some of our custom code?

#13 Updated by alant 2020-03-08 18:57:57

  • Assignee deleted (alant)