← Back to team overview

ubuntu-privacy team mailing list archive

[Bug 94230] Re: thumbnails privacy violation hazard

 

The in 12.04 introduced privacy tool, which claims to delete the
"history" should also delete the thumbnails created during that period.

-- 
You received this bug notification because you are a member of Ubuntu
Privacy Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/94230

Title:
  thumbnails privacy violation hazard

Status in libgnomeui:
  New
Status in “libgnomeui” package in Ubuntu:
  Confirmed

Bug description:
  Binary package hint: eog

  Using a fresh feisty beta 20070302.1 desktop install, I did the following:
   1. Took a photo with my digital camera using an otherwise empty memory card
   2. Removed the memory card from the camera and inserted it (via a USB flash adaptor) into one of the USB slots on the computer.
   3. When offered the choice whether to "import" the photos, declined saying "ignore".
   4. Browsed the contents of the memory card using the Nautilus file manager
   5. Observed the image thumbnail which was visible in Nautilus
   6. Opened the image in eog
   7. Closed eog and the relevant nautilus windows
   8. Selected "unmount volume"
   9. Rebooted with the "Restart" option from the top-right-hand Quit button
  10. While the computer was rebooting, removed the flash card
  11. Observed that when the computer was rebooted and I had logged in, .thumbnails/normal/<long string of hex>.png was a thumbnail of my image.

  Note that the computer here has silently made a record of what was on
  the flash card.  Knowledgeable users can easily find this information
  and this poses a hazard to naive users of digital cameras.

  Arrangements should be made for these thumbnails to be in encrypted
  swap.  Failing that, the thumbnail cache should be disabled or
  frequently cleared.

To manage notifications about this bug go to:
https://bugs.launchpad.net/libgnomeui/+bug/94230/+subscriptions