Kodi phones home to check for updates

  • Done
  • quality assurance status badge
Details
3 participants
  • Gábor Boskovits
  • Efraim Flashner
  • Ludovic Courtès
Owner
unassigned
Submitted by
Efraim Flashner
Severity
normal
E
E
Efraim Flashner wrote on 9 Oct 2018 10:13
(address . bug-guix@gnu.org)
20181009081343.GA1127@macbook41
I launced kodi for my kids to watch some videos and I got a pop-up
telling me that 18-beta3 was available for download. We should patch out
the update checker.

--
Efraim Flashner <efraim@flashner.co.il> ????? ?????
GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEoov0DD5VE3JmLRT3Qarn3Mo9g1EFAlu8YzQACgkQQarn3Mo9
g1EgZg/+L1p3cHFQirYUZ1/1awfwZ1yhVkre9109r+AMS/XuBjgFPb5NutTUu94Q
cMR0z4/nEmJBH6Opo1/1j2TGlQxO28TAtwcJnhTgQa1dFveAnQfRwikjbdWu8X/y
Y6ck2ybdBOWglzalVasLP0R3vZ8sQSTb+AFGlghh/3v0WjUwjexyV6hDeEgCIEyg
mcVrz1dIlVsVqjKcmeepkWeCWLKYzokYnu4ByUMm+/DbRMxSvd3Ofe6P+j1iGbqf
vcGXO6bEQp5tIi6ZGCwR1XETfoUfemiW4RR5xyrj+AZhORfOt+/1QkDITsu/PAhu
eja31gy4Vao7fOYFBjR6z/aA5nnEyGEmc/Iq7eYg0gteCdWUv54kSdGY5skTRlCb
XtWUowwpDkvhtYvrPJGQ9tjBy/mPyeDRpZ3xroops+FZ1d5+MCPS0sard/OAvh1V
+mHo+g/VJDpeWU9rxIFrFw9T2vgspnKPTFfRWDJLuPBiVFsDkNKdYMdakGPeDGjZ
P0wlCecV5LHKCvh0xLNM6z+f0nxauOVwZvD2HC0Wojll7tF29ffOcAJIZm8tT2vU
NwTRqMWe6OHW+SA6Tysw7XTaS0pfb5x05WMct95p1XQs5S87Oo2I2cPYAdXtMlIO
EeGpe8SLo8aQ8itJ79HY2p/geNJokHcrgGsLvqefoJjNPK6Bl3c=
=r6Vu
-----END PGP SIGNATURE-----


G
G
Gábor Boskovits wrote on 9 Oct 2018 11:43
(name . Efraim Flashner)(address . efraim@flashner.co.il)(address . 32997@debbugs.gnu.org)
CAE4v=pgkb3eeyeV+u2mvnmygE4ZeGEPww_ebpHEQ24AfSgbz=w@mail.gmail.com
Efraim Flashner <efraim@flashner.co.il> ezt írta (id?pont: 2018. okt. 9.,
K, 10:14):

Toggle quote (10 lines)
> I launced kodi for my kids to watch some videos and I got a pop-up
> telling me that 18-beta3 was available for download. We should patch out
> the update checker.
>
> --
> Efraim Flashner <efraim@flashner.co.il> ????? ?????
> GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
> Confidentiality cannot be guaranteed on emails sent or received unencrypted
>

As a workaround you could try to configure Kodi to not check for updates.
1.~ From the Kodi home screen click SYSTEM>ADD-ONS>MY ADD-ONS.
2.~ SERVICES>VERSION CHECK>CONFIGURE.
3.~ Untick Enable Kodi Version Check>click OK>untick AUTO-UPDATE.
(did not try this myself)
Do you think that modifying the default configuration is enough, or should
we completely remove this functionality?
Attachment: file
E
E
Efraim Flashner wrote on 9 Oct 2018 11:48
(name . Gábor Boskovits)(address . boskovits@gmail.com)(address . 32997@debbugs.gnu.org)
20181009094827.GB1127@macbook41
On Tue, Oct 09, 2018 at 11:43:18AM +0200, Gábor Boskovits wrote:
Toggle quote (21 lines)
> Efraim Flashner <efraim@flashner.co.il> ezt írta (id?pont: 2018. okt. 9.,
> K, 10:14):
>
> > I launced kodi for my kids to watch some videos and I got a pop-up
> > telling me that 18-beta3 was available for download. We should patch out
> > the update checker.
> >
> > --
> > Efraim Flashner <efraim@flashner.co.il> ????? ?????
> > GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
> > Confidentiality cannot be guaranteed on emails sent or received unencrypted
> >
>
> As a workaround you could try to configure Kodi to not check for updates.
> 1.~ From the Kodi home screen click SYSTEM>ADD-ONS>MY ADD-ONS.
> 2.~ SERVICES>VERSION CHECK>CONFIGURE.
> 3.~ Untick Enable Kodi Version Check>click OK>untick AUTO-UPDATE.
> (did not try this myself)
> Do you think that modifying the default configuration is enough, or should
> we completely remove this functionality?

I think it'd be better to completely remove the functionality, there's
nothing an end-user can really gain since we've packaged the software.

I also think we're due for an update to the package :)

--
Efraim Flashner <efraim@flashner.co.il> ????? ?????
GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
-----BEGIN PGP SIGNATURE-----
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=9CYN
-----END PGP SIGNATURE-----


L
L
Ludovic Courtès wrote on 10 Oct 2018 14:47
control message for bug #32997
(address . control@debbugs.gnu.org)
874ldu9df8.fsf@gnu.org
tags 32997 security
E
E
Efraim Flashner wrote on 21 Oct 2018 15:40
Re: bug#32997: Kodi phones home to check for updates
(address . 32997-done@debbugs.gnu.org)
20181021134030.GE1102@macbook41
Fixed in 2c17bd7b2955beef4130d11b33e07e4fb3b234dc

--
Efraim Flashner <efraim@flashner.co.il> ????? ?????
GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEoov0DD5VE3JmLRT3Qarn3Mo9g1EFAlvMgc0ACgkQQarn3Mo9
g1HB7g/+NhFQxfSHTyLYNXRVf61T91ST9t6Ea9ykQ47OvSeKXhWBh5+gv3d+uJ0J
Eyi/rK8D+YqSjkdVYnH3oEI/hIVEZ4/z0a1lFy2PPHEXhwHX/pDeXjalBLIM0VcX
X8jxZ5BlXivk+rBDx+UbEL5YQlbXqu0+HbvQ+pNKf+v1s+yy4M4tKaSW23M9zR5j
f4OStawQm87fWeRFvPjd6nd0pSo/4MyDNzXZy+UZXn7G+/N7vcQULSla5aOYR509
gJxpbpC3IlY2VIUqQ+Y4E09bR+hh18yHSy5Umai+DsWWPzwKXFQOxaODuytwAIdd
SoQTuAZQKjB97QIrZC0Chkr1A10uqFXa3XpbeYXyh6nqkkPUdKxiRKi6YtXhf/F7
R3MQHt5+K6tMEgI7+BVUPx4iK0wFjHu4vTF/a1OWkCKXPaSS7GXYk4Xz0drpNycn
KaYQ8RyiSObEqgXo3lFO0GEu4VLTsNvd45uobeKpcfzHShojcqBtwd6xbEad6tuN
g1rRKIuaxEgPNkLKYiwDavELXiIvmtrt6IufcCwbfXo7sErv5P/bwysE5KVvLWfM
XuN4NwQteffEfIiz/2e6czNqA2/IExhYCHNuX82mFp+b0PPPLpsuvMQjijYQNPCJ
HsiKrI+DvzwOGNpMHh9kEesLs8iL3DsJCU3nRkbZ3L0lDaZggiM=
=KEBj
-----END PGP SIGNATURE-----


Closed
?