From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mark H Weaver Subject: Calibre phones home without asking, and offers to update itself Date: Sun, 22 Mar 2015 12:41:08 -0400 Message-ID: <874mpd9e8r.fsf_-_@netris.org> References: <20150321193352.27371.24649@vcs.savannah.gnu.org> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:36621) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YZivs-0000Ln-Et for guix-devel@gnu.org; Sun, 22 Mar 2015 12:41:01 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1YZivn-0001DG-FD for guix-devel@gnu.org; Sun, 22 Mar 2015 12:41:00 -0400 Received: from world.peace.net ([50.252.239.5]:50804) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YZivn-0001BO-CI for guix-devel@gnu.org; Sun, 22 Mar 2015 12:40:55 -0400 In-Reply-To: (Andreas Enge's message of "Sat, 21 Mar 2015 19:33:53 +0000") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: guix-devel@gnu.org Andreas Enge writes: > commit e5ffe52cc7d0fa3242e3cd11f63c94deab91a3d5 > Author: Andreas Enge > Date: Sat Mar 21 20:33:22 2015 +0100 > > gnu: calibre: Update to 2.22.0. > > * gnu/packages/ebook.scm (calibre): Update to 2.22.0. I haven't yet updated Calibre to 2.22.0, but version 2.21 told me about the new version the last time I ran it, and offered to update it for me. This raises a few problems: * It's automatically phoning home on launch without my consent, which is a breach of privacy. * I don't know exactly what would happen if I let it attempt to update itself, but since upstream Calibre includes non-free software (unrar), it's probably offering to install non-free software for me. We should disable this functionality in our Calibre package. Mark