Kodi phones home to check for updates

  • Done
  • quality assurance status badge
Details
3 participants
  • Gábor Boskovits
  • Efraim Flashner
  • Ludovic Courtès
Owner
unassigned
Submitted by
Efraim Flashner
Severity
normal

Debbugs page

E
E
Efraim Flashner wrote on 9 Oct 2018 01:13
(address . bug-guix@gnu.org)
20181009081343.GA1127@macbook41
I launced kodi for my kids to watch some videos and I got a pop-up
telling me that 18-beta3 was available for download. We should patch out
the update checker.

--
Efraim Flashner <efraim@flashner.co.il> אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEoov0DD5VE3JmLRT3Qarn3Mo9g1EFAlu8YzQACgkQQarn3Mo9
g1EgZg/+L1p3cHFQirYUZ1/1awfwZ1yhVkre9109r+AMS/XuBjgFPb5NutTUu94Q
cMR0z4/nEmJBH6Opo1/1j2TGlQxO28TAtwcJnhTgQa1dFveAnQfRwikjbdWu8X/y
Y6ck2ybdBOWglzalVasLP0R3vZ8sQSTb+AFGlghh/3v0WjUwjexyV6hDeEgCIEyg
mcVrz1dIlVsVqjKcmeepkWeCWLKYzokYnu4ByUMm+/DbRMxSvd3Ofe6P+j1iGbqf
vcGXO6bEQp5tIi6ZGCwR1XETfoUfemiW4RR5xyrj+AZhORfOt+/1QkDITsu/PAhu
eja31gy4Vao7fOYFBjR6z/aA5nnEyGEmc/Iq7eYg0gteCdWUv54kSdGY5skTRlCb
XtWUowwpDkvhtYvrPJGQ9tjBy/mPyeDRpZ3xroops+FZ1d5+MCPS0sard/OAvh1V
+mHo+g/VJDpeWU9rxIFrFw9T2vgspnKPTFfRWDJLuPBiVFsDkNKdYMdakGPeDGjZ
P0wlCecV5LHKCvh0xLNM6z+f0nxauOVwZvD2HC0Wojll7tF29ffOcAJIZm8tT2vU
NwTRqMWe6OHW+SA6Tysw7XTaS0pfb5x05WMct95p1XQs5S87Oo2I2cPYAdXtMlIO
EeGpe8SLo8aQ8itJ79HY2p/geNJokHcrgGsLvqefoJjNPK6Bl3c=
=r6Vu
-----END PGP SIGNATURE-----


G
G
Gábor Boskovits wrote on 9 Oct 2018 02:43
(name . Efraim Flashner)(address . efraim@flashner.co.il)(address . 32997@debbugs.gnu.org)
CAE4v=pgkb3eeyeV+u2mvnmygE4ZeGEPww_ebpHEQ24AfSgbz=w@mail.gmail.com
Efraim Flashner <efraim@flashner.co.il> ezt írta (időpont: 2018. okt. 9.,
K, 10:14):

Toggle quote (10 lines)
> I launced kodi for my kids to watch some videos and I got a pop-up
> telling me that 18-beta3 was available for download. We should patch out
> the update checker.
>
> --
> Efraim Flashner <efraim@flashner.co.il> אפרים פלשנר
> GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
> Confidentiality cannot be guaranteed on emails sent or received unencrypted
>

As a workaround you could try to configure Kodi to not check for updates.
1.~ From the Kodi home screen click SYSTEM>ADD-ONS>MY ADD-ONS.
2.~ SERVICES>VERSION CHECK>CONFIGURE.
3.~ Untick Enable Kodi Version Check>click OK>untick AUTO-UPDATE.
(did not try this myself)
Do you think that modifying the default configuration is enough, or should
we completely remove this functionality?
Attachment: file
E
E
Efraim Flashner wrote on 9 Oct 2018 02:48
(name . Gábor Boskovits)(address . boskovits@gmail.com)(address . 32997@debbugs.gnu.org)
20181009094827.GB1127@macbook41
On Tue, Oct 09, 2018 at 11:43:18AM +0200, Gábor Boskovits wrote:
Toggle quote (21 lines)
> Efraim Flashner <efraim@flashner.co.il> ezt írta (időpont: 2018. okt. 9.,
> K, 10:14):
>
> > I launced kodi for my kids to watch some videos and I got a pop-up
> > telling me that 18-beta3 was available for download. We should patch out
> > the update checker.
> >
> > --
> > Efraim Flashner <efraim@flashner.co.il> אפרים פלשנר
> > GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
> > Confidentiality cannot be guaranteed on emails sent or received unencrypted
> >
>
> As a workaround you could try to configure Kodi to not check for updates.
> 1.~ From the Kodi home screen click SYSTEM>ADD-ONS>MY ADD-ONS.
> 2.~ SERVICES>VERSION CHECK>CONFIGURE.
> 3.~ Untick Enable Kodi Version Check>click OK>untick AUTO-UPDATE.
> (did not try this myself)
> Do you think that modifying the default configuration is enough, or should
> we completely remove this functionality?

I think it'd be better to completely remove the functionality, there's
nothing an end-user can really gain since we've packaged the software.

I also think we're due for an update to the package :)

--
Efraim Flashner <efraim@flashner.co.il> אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
-----BEGIN PGP SIGNATURE-----
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=9CYN
-----END PGP SIGNATURE-----


L
L
Ludovic Courtès wrote on 10 Oct 2018 05:47
control message for bug #32997
(address . control@debbugs.gnu.org)
874ldu9df8.fsf@gnu.org
tags 32997 security
E
E
Efraim Flashner wrote on 21 Oct 2018 06:40
Re: bug#32997: Kodi phones home to check for updates
(address . 32997-done@debbugs.gnu.org)
20181021134030.GE1102@macbook41
Fixed in 2c17bd7b2955beef4130d11b33e07e4fb3b234dc

--
Efraim Flashner <efraim@flashner.co.il> אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
-----BEGIN PGP SIGNATURE-----
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=KEBj
-----END PGP SIGNATURE-----


Closed
?
Your comment

This issue is archived.

To comment on this conversation send an email to 32997@patchwise.org

To respond to this issue using the mumi CLI, first switch to it
mumi current 32997
Then, you may apply the latest patchset in this issue (with sign off)
mumi am -- -s
Or, compose a reply to this issue
mumi compose
Or, send patches to this issue
mumi send-email *.patch