Re: KDE phoning home

Nicholas D Steeves <[email protected]> Sun, 07 Sep 2025 16:40:01 -0400
Newsgroups gmane.linux.debian.user.kde
Message-ID <[email protected]>
Martin Steigerwald <[email protected]> writes:

> I am pretty sure no one replicated this setup for Runit based systems, so… 
> unless KDE starts it by some other means, like for example with "kded", 
> then it might just not run here. At least by looking at the package 
> drkonqi – see below – it does not seem to be auto started by DBUS in case 
> Systemd is not available.
>
> I think in case it is triggered by a timer then you can disable or mask 
> the timer. Like
>
> systemctl --user disable drkonqi-sentry-postman.timer
> systemctl --user mask drkonqi-sentry-postman.timer

+1

> Those service and timer files are in package "drkonqi". So I bet that is 
> the package to report a bug for.

+1  This kind of phone home behaviour is substantially more serious
than lintian's privacy-breach-generic warning, and it needs to be fixed.

It seems like there are several bugs here:

  1. Enabling drkonqi doesn't disclose that it will enable
  pseudopermanent user tracking.  This is a consent issue.
  2. Upgrades from bookworm to trixie silently enable the user-tracker.
  This violates Debian user expectations of privacy and consent and imho
  is a significant regression.
  3. Is drkonqi-sentry-postman.timer installed, by default, in a
  disabled state for new trixie installations?  If not, that's another bug.

Cheers,
Nicholas

P.S. Please feel free to quote me on this
signature.asc (application/pgp-signature, 857 B)
-----BEGIN PGP SIGNATURE-----
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=Hz7G
-----END PGP SIGNATURE-----