[tor-bugs] #13154 [Applications/Tor bundles/installation]: https://trac.torproject.org/projects/tor/wiki/WikiFormattingDebian's "popularity contest" package as threat vector?

[Tor Bug Tracker & Wiki]

#13154: https://trac.torproject.org/projects/tor/wiki/WikiFormattingDebian's
"popularity contest" package as threat vector?
-------------------------------------+-------------------------------------
 Reporter:  saint                    |          Owner:  saint
     Type:  project                  |         Status:  closed
 Priority:  Medium                   |      Milestone:
Component:  Applications/Tor         |        Version:  Tor: 0.3.0.0-alpha-
  bundles/installation               |  dev
 Severity:  Major                    |     Resolution:  fixed
 Keywords:  tor-hs, Debian, Stormy   |  Actual Points:
Parent ID:                           |         Points:
 Reviewer:                           |        Sponsor:  Sponsor4
-------------------------------------+-------------------------------------
Changes (by satiroloko):

 * version:   => Tor: 0.3.0.0-alpha-dev
 * type:  enhancement => project
 * sponsor:   => Sponsor4


Comment:

 Replying to [ticket:13154 saint]:
 >   I am wondering whether to force-uninstall Debian's `popularity-
 contest` package as part of Stormy's installation process.  It would be
 good to have an idea how popular Stormy is, but on the other hand, I'm not
 sure how anonymous the reporting is on Debian's end.
 >
 >   This is also relevant for users of the `tor` package, who might also
 be at mild risk (though far less so because the number of users is so
 high, and doesn't reveal location of location-hidden services).
 >
 >   Anyone have opinions on this?  I'm leaning towards checking if
 popularity-contest is installed and then asking if the user would like it
 to be removed.
 >
 > EDIT: We should also discuss whether to remove it as part of Tor's
 installation process overall.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13154#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online