[Bug 205487] New: Vendor version should be correct
https://bugzilla.novell.com/show_bug.cgi?id=205487 Summary: Vendor version should be correct Product: SUSE Linux 10.1 Version: Final Platform: i686 OS/Version: SuSE Linux 10.1 Status: NEW Severity: Normal Priority: P5 - None Component: Firefox AssignedTo: bnc-team-mozilla@forge.provo.novell.com ReportedBy: jhaygood@spsu.edu QAContact: qa@suse.de Currently: According to the useragent, I'm using: SUSE 1.5.0.6-1.3 release of Firefox 1.5.0.6 It should be: SUSE Linux 10.1: SUSE/10.1 Firefox/1.5.0.6 for SUSE Linux 10.1 OpenSUSE 10.2: SUSE/10.2 Firefox/1.5.0.6 (or OpenSUSE/10.2) SLED 10: SLED/10.0 (or SUSE/10.1 even) This also provides the side benefit of being able to automagically determining the current SUSE operating system. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=205487 andreas.hanke@gmx-topmail.de changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |andreas.hanke@gmx-topmail.de ------- Comment #1 from andreas.hanke@gmx-topmail.de 2006-09-13 11:15 MST ------- Do we really _need_ all these details in the user agent string? What if a user doesn't want his current SUSE operating system to be "automagically" determined? Some thoughts: - Care must be taken when changing the user agent string because various sites are relying on a certain syntax to recognize the browser. - There are trademark issues. I don't see a legitimate use for a site trying to determine my current SUSE operating system. The "SUSE" part is probably needed because of trademark policy and the Firefox version is needed because requiring a minimum Firefox version is legitimate, but why the hell would a site be interested in my operating system release number? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=205487 wolfgang.rosenauer@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WONTFIX ------- Comment #2 from wolfgang.rosenauer@novell.com 2006-09-13 11:27 MST ------- Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.8.0.6) Gecko/20060728 SUSE/1.5.0.6-1.4 Firefox/1.5.0.6 where only "SUSE/1.5.0.6-1.4" is under our control. We won't use different vendor names for openSUSE or SLED or similar because that doesn't make sense. And personally I'm against using the distribution version as version indicator for privacy reasons. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=205487 ------- Comment #3 from jhaygood@spsu.edu 2006-09-13 14:30 MST ------- They already know you're using SUSE x86_64, speak German, and using Firefox 1.5.0.6 built on July 28, 2006 by SUSE. What's the harm of using the version to? It's not really gonna hurt much: For instance, here at work: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.6) Gecko/20060728 Firefox/1.5.0.6 If there's an exploit, what's the chances that it'll affect only "SUSE Linux 10.1", and not any other Linux x86_64 (or i586, or PPC..) using the same Firefox version? Pros: * Easy to aggregate SUSE version, for instance, web stats, etc. Cons: * Might be a privacy risk to have version, but they already gleam alot of other stuff. If its a privacy concern, why not remove the hardware type, OS type, and version all together? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=205487 ------- Comment #4 from wolfgang.rosenauer@novell.com 2006-09-13 22:25 MST ------- Because the hardware type, OS type and version is nothing we are allowed to change since it's provided upstream. I'm not talking about exploits when I talk about privacy. It would be one more (in addition to the already included) information and I don't like the idea to give even more information. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
participants (1)
-
bugzilla_noreply@novell.com