Mailing-List: contact general-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: general@incubator.apache.org
Content-Type: text/plain; charset=iso-8859-15; format=flowed; delsp=yes
To: general@incubator.apache.org
Subject: Re: ASF hosted binaries collecting user data without an explicit
 opt-in
References: <CA+ULb+s1gC9T-Za-3F47a8Qwz49GJ6LP7kUK7OxAmXaN0RpQkQ@mail.gmail.com> <22BA3553-6291-4EAD-848A-0112584C4B1D@apache.org> <CA+ULb+t64pe36rGNmwHtaUxOPrdWkwuDX1dRYcw_TVOdrNQahg@mail.gmail.com> <6F37300C-F11E-4D74-A9A7-636E0F3D664C@apache.org> <CA+ULb+tjGoWYS+=BEjzeE5MfSid6ui_b64kQZUC08MF6BNWmJw@mail.gmail.com> <CAOqetn8BYk_Pqgo2=kAs3gX_hDTqZWyc3unGo4hE1qGAm5EDEQ@mail.gmail.com> <CA+ULb+uY5bd1o7GdNq+Mm5vRP7tzMnm-OZ_GqWb5Ly_2781dQw@mail.gmail.com> <pony-5c0191c5bda2836af1cb87878694cfbf1db676c8-18c6d601eb0b1141399182d79b5d1fbb10e4c4bc@general.incubator.apache.org> <CAEWfVJkqFdO-2-gfwHyCq6kbcHTYzG94YCC8y9Vx6-p7F2LZXA@mail.gmail.com>
Date: Thu, 08 Jun 2017 10:01:12 +0200
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: "Raphael Bircher" <rbircherapache@gmail.com>
Organization: Apache Software Foundation
Message-ID: <op.y1h8kae44ntv07@desktop-v42f38k>
In-Reply-To: <CAEWfVJkqFdO-2-gfwHyCq6kbcHTYzG94YCC8y9Vx6-p7F2LZXA@mail.gmail.com>
User-Agent: Opera Mail/1.0 (Win32)
archived-at: Thu, 08 Jun 2017 08:01:33 -0000

Hi all,

Am .06.2017, 09:43 Uhr, schrieb Bertrand Delacretaz  
<bdelacretaz@codeconsult.ch>:

> On Wed, Jun 7, 2017 at 5:32 PM, Sean Busbey <busbey@apache.org> wrote:
>> ...Who owns release policy? I presume it's VP Legal, which would  
>> suggest legal-discuss...
>
> I don't think our release policy is relevant here.
>
> The issue is a project releasing software that a) collects user data
> without an explicit opt-in, and b) apparently does that in an insecure
> way.
>
> a) is a privacy violation - we have
> https://www.apache.org/foundation/policies/privacy.html for that, I
> suggest that we simply expand it with a "collecting user data"
> section. As Shane mentions
> https://wiki.openoffice.org/wiki/Update_Service is related.
>
> b) is a general security problem,
> http://www.apache.org/security/committers.html applies to that as
> usual.
>
> Am I missing something?
Yea, as far as I know it is in a old version who is in the archive, right.  
I think this makes some difference.

Regards Raphael


-- 
My introduction https://youtu.be/Ln4vly5sxYU

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org