Kodi phones home to check for updates

DoneSubmitted by Efraim Flashner.
Details
3 participants
  • Gábor Boskovits
  • Efraim Flashner
  • Ludovic Courtès
Owner
unassigned
Severity
normal
E
E
Efraim Flashner wrote on 9 Oct 2018 10:13
(address . bug-guix@gnu.org)
20181009081343.GA1127@macbook41
I launced kodi for my kids to watch some videos and I got a pop-uptelling me that 18-beta3 was available for download. We should patch outthe update checker.
-- Efraim Flashner <efraim@flashner.co.il> אפרים פלשנרGPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351Confidentiality cannot be guaranteed on emails sent or received unencrypted
-----BEGIN PGP SIGNATURE-----
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r6Vu-----END PGP SIGNATURE-----

G
G
Gábor Boskovits wrote on 9 Oct 2018 11:43
(name . Efraim Flashner)(address . efraim@flashner.co.il)(address . 32997@debbugs.gnu.org)
CAE4v=pgkb3eeyeV+u2mvnmygE4ZeGEPww_ebpHEQ24AfSgbz=w@mail.gmail.com
Efraim Flashner <efraim@flashner.co.il> ezt írta (időpont: 2018. okt. 9.,K, 10:14):
Toggle quote (10 lines)> I launced kodi for my kids to watch some videos and I got a pop-up> telling me that 18-beta3 was available for download. We should patch out> the update checker.>> --> Efraim Flashner <efraim@flashner.co.il> אפרים פלשנר> GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351> Confidentiality cannot be guaranteed on emails sent or received unencrypted>
As a workaround you could try to configure Kodi to not check for updates.1.~ From the Kodi home screen click SYSTEM>ADD-ONS>MY ADD-ONS.2.~ SERVICES>VERSION CHECK>CONFIGURE.3.~ Untick Enable Kodi Version Check>click OK>untick AUTO-UPDATE.(did not try this myself)Do you think that modifying the default configuration is enough, or shouldwe completely remove this functionality?
Attachment: file
E
E
Efraim Flashner wrote on 9 Oct 2018 11:48
(name . Gábor Boskovits)(address . boskovits@gmail.com)(address . 32997@debbugs.gnu.org)
20181009094827.GB1127@macbook41
On Tue, Oct 09, 2018 at 11:43:18AM +0200, Gábor Boskovits wrote:
Toggle quote (21 lines)> Efraim Flashner <efraim@flashner.co.il> ezt írta (időpont: 2018. okt. 9.,> K, 10:14):> > > I launced kodi for my kids to watch some videos and I got a pop-up> > telling me that 18-beta3 was available for download. We should patch out> > the update checker.> >> > --> > Efraim Flashner <efraim@flashner.co.il> אפרים פלשנר> > GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351> > Confidentiality cannot be guaranteed on emails sent or received unencrypted> >> > As a workaround you could try to configure Kodi to not check for updates.> 1.~ From the Kodi home screen click SYSTEM>ADD-ONS>MY ADD-ONS.> 2.~ SERVICES>VERSION CHECK>CONFIGURE.> 3.~ Untick Enable Kodi Version Check>click OK>untick AUTO-UPDATE.> (did not try this myself)> Do you think that modifying the default configuration is enough, or should> we completely remove this functionality?
I think it'd be better to completely remove the functionality, there'snothing an end-user can really gain since we've packaged the software.
I also think we're due for an update to the package :)
-- Efraim Flashner <efraim@flashner.co.il> אפרים פלשנרGPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351Confidentiality cannot be guaranteed on emails sent or received unencrypted
-----BEGIN PGP SIGNATURE-----
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9CYN-----END PGP SIGNATURE-----

L
L
Ludovic Courtès wrote on 10 Oct 2018 14:47
control message for bug #32997
(address . control@debbugs.gnu.org)
874ldu9df8.fsf@gnu.org
tags 32997 security
E
E
Efraim Flashner wrote on 21 Oct 2018 15:40
Re: bug#32997: Kodi phones home to check for updates
(address . 32997-done@debbugs.gnu.org)
20181021134030.GE1102@macbook41
Fixed in 2c17bd7b2955beef4130d11b33e07e4fb3b234dc
-- Efraim Flashner <efraim@flashner.co.il> אפרים פלשנרGPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351Confidentiality cannot be guaranteed on emails sent or received unencrypted
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEEoov0DD5VE3JmLRT3Qarn3Mo9g1EFAlvMgc0ACgkQQarn3Mo9g1HB7g/+NhFQxfSHTyLYNXRVf61T91ST9t6Ea9ykQ47OvSeKXhWBh5+gv3d+uJ0JEyi/rK8D+YqSjkdVYnH3oEI/hIVEZ4/z0a1lFy2PPHEXhwHX/pDeXjalBLIM0VcXX8jxZ5BlXivk+rBDx+UbEL5YQlbXqu0+HbvQ+pNKf+v1s+yy4M4tKaSW23M9zR5jf4OStawQm87fWeRFvPjd6nd0pSo/4MyDNzXZy+UZXn7G+/N7vcQULSla5aOYR509gJxpbpC3IlY2VIUqQ+Y4E09bR+hh18yHSy5Umai+DsWWPzwKXFQOxaODuytwAIddSoQTuAZQKjB97QIrZC0Chkr1A10uqFXa3XpbeYXyh6nqkkPUdKxiRKi6YtXhf/F7R3MQHt5+K6tMEgI7+BVUPx4iK0wFjHu4vTF/a1OWkCKXPaSS7GXYk4Xz0drpNycnKaYQ8RyiSObEqgXo3lFO0GEu4VLTsNvd45uobeKpcfzHShojcqBtwd6xbEad6tuNg1rRKIuaxEgPNkLKYiwDavELXiIvmtrt6IufcCwbfXo7sErv5P/bwysE5KVvLWfMXuN4NwQteffEfIiz/2e6czNqA2/IExhYCHNuX82mFp+b0PPPLpsuvMQjijYQNPCJHsiKrI+DvzwOGNpMHh9kEesLs8iL3DsJCU3nRkbZ3L0lDaZggiM==KEBj-----END PGP SIGNATURE-----

Closed
?
Your comment

This issue is archived.

To comment on this conversation send email to 32997@debbugs.gnu.org