touch-packages team mailing list archive
-
touch-packages team
-
Mailing list archive
-
Message #93140
[Bug 1479747] Re: An app can see whether you have an account without permission
** Changed in: ubuntu-system-settings-online-accounts (Ubuntu)
Status: New => In Progress
** Changed in: ubuntu-system-settings-online-accounts (Ubuntu)
Assignee: (unassigned) => Alberto Mardegan (mardy)
** Changed in: ubuntu-system-settings-online-accounts (Ubuntu)
Importance: Undecided => High
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-system-settings-
online-accounts in Ubuntu.
https://bugs.launchpad.net/bugs/1479747
Title:
An app can see whether you have an account without permission
Status in ubuntu-system-settings-online-accounts package in Ubuntu:
In Progress
Bug description:
Ubuntu 15.04 r74
1. In Online Accounts, set up a Google account.
2. Install the Calendar app.
3. From the Calendar app's kebab menu, choose "Calendars".
What you see: Your Google account is already listed as a calendar.
What you should see: The Google account is not listed, because you
haven't given permission for the app to know that it exists.
This is a privacy violation: it means that a service can see whether
you have an account with a competing service when that's none of their
business. For example, it means that a Facebook app could tell whether
you have a Twitter account, or vice versa; a Flickr app could tell
whether you have an Instagram account, or vice versa; a Strava app
could tell whether you have a Fitbit account, and so on.
<https://wiki.ubuntu.com/OnlineAccounts#App_access>: "An app should
have no idea whether you have any accounts of a particular type stored
in Online Accounts. It should merely ask for access to an account of a
particular type."
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-system-settings-online-accounts/+bug/1479747/+subscriptions
References