Slashdot Mirror


Ubuntu Disputes 'Ads In MOTD' Claims (twitter.com)

Thursday Lproven (Slashdot reader #6030) wrote: It appears that Ubuntu is using a feature it has added -- intended to insert headlines of breaking tech news (security alerts and so on) into the Message of the Day displayed at login to the console -- to display advertising and promotional messages.
The message in question linked to a Hacker Noon article titled "How HBO's Silicon Valley built 'Not Hotdog' with mobile TensorFlow, Keras & React Native." Later that day Dustin Kirkland, a Ubuntu Product Manager for the feature's design (and the Core Developer for its implementation) suggested the message had been mistaken for an ad, describing it on Hacker News as a "fun fact... an interesting tidbit of potpourri from the world of Ubuntu," and later saying it was intended like Google's doodles. "Last week's message actually announced an Ubuntu conference in Latin America. The week before, we linked to an article asking for feedback on Kubuntu. Before that, we announced the availability of Extended Security Maintenance updates for 12.04. And so on." He later confirmed Canonical received no money for the message, and also pointed out that the messages all come from an open source repository, and "You're welcome to propose your own messages for merging, if you have a well formatted, informative message for Ubuntu users."

Click through for a condensed version of the complete response by Dustin Kirkland, Ubuntu Product and Strategy at Canonical.
Kirkland describes the design of the feature as follows:
  • Asynchronously, about 60 seconds after boot, a systemd timer fires which runs "/etc/update-motd.d/50-motd-news --force"
  • It sources 3 admin-editable config variables in /etc/default/motd-news. The defaults are: ENABLED=1, URLS="https://motd.ubuntu.com", WAIT="5"
  • The admin can disable it entirely (ENABLED=0), change or add other MOTD news sources (your corporate IT team could run its own), and change the wait time in seconds
  • If it's enabled, that systemd timer job will loop over each of the URLS (note, that it's important that these should be https with valid SSL certificates), trim them to 80 characters per line, and a maximum of 10 lines, and concatenate them to a cache file in /var/cache/motd-news
  • Every ~12 hours thereafter (with a little bit of random timer fuzzing), this systemd timer job will re-run and update the /var/cache/motd-news
  • Upon login, the contents of /var/cache/motd-news is just printed to screen.

Kirkland notes the message can be customized by local IT administrators, or used to deliver warnings about serious vulnerabilities like Shellshock or Heartbleed. And he also describes the dynamic motd as a Ubuntu feature since adopted by other distros (including Debian) as "a flexible framework that enables distro packages or administrators to add executable scripts in /etc/update-motd.d/* to generate informative, interesting messages displayed at login... for almost 40 years of Linux/UNIX, the 'Message of the Day' was anything but that... It was a message that was created at one point in time, when the distro released, and that's about it. And we managed to change that."

110 comments

  1. Tech Industry Robber Barons by Anonymous Coward · · Score: 2, Insightful

    Tech industry robber barons have finally destroyed the last vestige of Unix freedom.

    The message of the day is for local news to local users.

    MOTD is off limits to vendors, you money grubbing assholes!

    You damn kids, get off my box!

    1. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0, Insightful

      Linux never was free. You're at the mercy of developers who would rather push their GNU/communist agenda rather than produce quality software. If they decide you should have to use systemd, you're either stick with systemd or a distribution that lacks the support of bigger distributions. If they decide that a high quality piece of proprietary software, such as a video driver, should be pulled from the distribution, you're stuck with an inferior open source product. You never truly had any freedom unless you have the time to maintain and develop your own distribution, which almost nobody has the time to do. The developers don't care about your best interests, and often engage in pissing contests that fork projects, again at the expense of users. There is very little true freedom in open source unless you're willing to develop everything from scratch. You're at the mercy of developers who certainly don't care about the best interests of users. Freedom my ass.

    2. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 2, Insightful

      Sounds like neither open nor proprietary software is the way to go. So what should we do? Become luddites?

    3. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      True enough I am currently it talk with ubuctu this would be a new revenu stream for me the idea is to put my affiliate amazon link on message of the day ubuctu.
      -creamer

    4. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 1

      Stopped reading at "communist".

    5. Re: Tech Industry Robber Barons by Zontar+The+Mindless · · Score: 4, Insightful

      You have the freedom to live in a home that's any colour you like, as long as you're willing to paint it or hire someone to do so.

      According to the parent, this isn't freedom.

      Discuss.

      --
      Il n'y a pas de Planet B.
    6. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      With OSS you don't need time to fix things yourself, you can hire someone to help. With closed source software, you got no choice but to depend on the owner of the software.

    7. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      you're either stick with systemd or a distribution that lacks the support of bigger distributions

      I'm so sorry for you that distributions choose to use technically superior solutions rather than following your fears of any sort of change.

    8. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      Improve the programming languages so far that maintaining your own programs is easy. There's no reason that we have to program like if we had to micromanage a 1980 era microcomputer, really.

    9. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      Learn to core and do it yourself. Talk to the people from libreoffice or mariadb or MATE (or Julia) or...

    10. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 1

      With OSS you don't need time to fix things yourself, you can hire someone to help.

      Reality is unless you're a corporation with some cash to throw around it's cost-prohibitive to hire software developers to make changes to your system.

    11. Re:Tech Industry Robber Barons by Lumpy · · Score: 2

      Except it's not happening in Slackware, Debian, or Gentoo..

      ubuntu is NOT all linux distros, but simply the only one that is heavily marketed. It doesnt even have the lions share across all linux installs.

      --
      Do not look at laser with remaining good eye.
    12. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      no, it isn't. You spend more on a night out in the USA than it costs to hire a 3rd world programmer for a month.

    13. Re: Tech Industry Robber Barons by Slashdot+Junky · · Score: 1

      A big problem with software today and for years is that we don't concern ourselves with hardware specs to anywhere near the degree we should. Instead, resources are wasted left and right, because we're not limited by an 8Mhz processor and 64K RAM.

      --
      .
      Landfill Mining Co.
      Managing the (Un)natural Resources of Tomorrow
    14. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      The potential that "something can occur" (eg: freedom) and your individual capacity to make it happen are two separate axes, and sometimes, in certain complicated domains (like technology) they cross only at a vanishingly small point, if ever.

      You're free to go into outer space, too.

      Are you truly free to go into outer space, though? If its really not an option for you, how are you free to excercise it

    15. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      Shit like this is what gets you called a "freetard"

    16. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      There are half a dozen people giving away free houses, but you don't like the color or any of them. So rather than pay for paint, you rent a house from the dodgy guy wearing the wife-beater who wanders into your living room and paws through your stuff whenever you're out.

    17. Re: Tech Industry Robber Barons by antdude · · Score: 1

      Move out, duh.

      --
      Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
    18. Re: Tech Industry Robber Barons by serviscope_minor · · Score: 1

      Who modded this junk up?

      It basically says that the only freedom is when someone does all the work for you and hands it to you on a plate. Freedom doesn't mean people give you exactly what you want all the time. Freedom means no one will stop you doing what you want.

      --
      SJW n. One who posts facts.
    19. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      ..and will this magic unicorn software be open or proprietary?

    20. Re: Tech Industry Robber Barons by Zero__Kelvin · · Score: 1

      I know! It seems no matter what software I use it isn't free! Whoever writes the dann software can just use a typedef when I think they should use a #define! It is an atrocity I tell You! Where is my software written by me using the libraries I want, but with someone else doing all the work damn it?!!!

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    21. Re: Tech Industry Robber Barons by Waccoon · · Score: 1

      Nobody said freedom is practical.

    22. Re: Tech Industry Robber Barons by KGIII · · Score: 1

      Do you mean axis?

      --
      "So long and thanks for all the fish."
    23. Re: Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      axes
      [ak-seez]

      noun
      1.plural of axis

    24. Re:Tech Industry Robber Barons by Anonymous Coward · · Score: 0

      any why anyone uses it given its buggyness and unreliability is beyond me

    25. Re: Tech Industry Robber Barons by KGIII · · Score: 1

      I've gotta stop posting while stoned. Sadly, I knew that.

      --
      "So long and thanks for all the fish."
    26. Re: Tech Industry Robber Barons by Tenebrousedge · · Score: 1

      I nominate this for the most thoroughly retarded comment that has ever been posted to Slashdot. Fuck off permanently.

      --
      Those who advocate genocide deserve every protection afforded by law, and none afforded by common human decency.
  2. Double Standard by Anonymous Coward · · Score: 3, Insightful

    When Microsoft places ads in the form of recommended apps in Windows 10, it's denounced as evil. When Ubuntu places ads in the MOTD, it's somehow okay and completely acceptable. It's not unlike Ubuntu sending searches to the internet by default to retrieve recommendations for the user. Of course, this was also tolerated and considered acceptable. There's a double standard in which Microsoft is criticized for the very things open source also does. Now, I'll surely get censored by aggressive moderators who would prefer rather to mod me down to -1 rather than discuss the hypocrisy in what is otherwise an open source echo chamber.

    1. Re:Double Standard by lucm · · Score: 1, Troll

      Ubuntu is the Microsoft of the Linux world. Everyone knows that. Why would anyone be surprised by this kind of invasive "feature" is beyond me.

      Also I personally don't get the whole Debian thing, but if someone wants that on their machine, why would they take a retarded relative instead of going for the real thing? That's like choosing Oracle Linux over Red Hat.

      --
      lucm, indeed.
    2. Re:Double Standard by Anonymous Coward · · Score: 1

      It gets a pass because it actually isn't an ad and because Ubuntu is open source meaning if you don't like something, you can change it.

      Let me know when Microsoft releases the source code for Windows 10 so I can strip all of that spyware, adware and auto update crap from it.

    3. Re:Double Standard by chipschap · · Score: 1

      It gets a pass because it actually isn't an ad and because Ubuntu is open source meaning if you don't like something, you can change it.

      Let me know when Microsoft releases the source code for Windows 10 so I can strip all of that spyware, adware and auto update crap from it.

      Yes, you're spot on. The Ubuntu MOTD thing is ridiculous but easily fixed by any user with enough knowledge to have installed Ubuntu in the first place. The poster above who claimed there is no freedom in free software was completely wrong. You do have to be willing to put in a little effort (in the MOTD case, very little).

    4. Re:Double Standard by cas2000 · · Score: 5, Insightful

      No, neither of those actions by Ubuntu are or were considered acceptable or tolerable. The phone-home search bullshit caused a huge outcry and many complaints until Ubuntu stopped fucking doing it. The MOTD phone-home has just happened and is at the very early stage of that same process.

      Microsoft gets complained about more often when it does this shit because it does it far more often and far more comprehensively. Also, Microsoft either ignores complaints, or pretends to "accommodate consumer feedback" and then just does it again, more sneakily at a lower level in the system so it's even harder to get rid of.

      It doesn't matter at all who does it.

    5. Re: Double Standard by Zero__Kelvin · · Score: 1

      Plenty of people use Ubuntu who could not simply fix this, and others will spend time fixing it when they could be making money so this is a costly decision on multiple levels. Bottom line: Linux is still awesome, but Ubuntu sucks donkey sucks even bigger than yesterday's.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    6. Re:Double Standard by Anonymous Coward · · Score: 0

      Also I personally don't get the whole Debian thing, but if someone wants that on their machine, why would they take a retarded relative instead of going for the real thing?

      Lazy troll is lazy. That was a halfhearted troll at best. Do a better job next time.

    7. Re:Double Standard by Anonymous Coward · · Score: 0

      There's a double standard in which Microsoft is criticized for the very things open source also does.

      Not all "open source" organizations are equal. It's really that simple.

    8. Re: Double Standard by Anonymous Coward · · Score: 0

      If you aren't capable of making the changes yourself, you are free to hire someone to do it for you. If you still aren't willing to do that, then it can't be that big of an issue and you can live with it.

      Freedom has to be taken and used, which is going to require some effort on your part. It doesn't mean you automatically get all of the shit you want handed to you on a silver platter.

    9. Re:Double Standard by najajomo · · Score: 1

      "When Microsoft places ads in the form of recommended apps in Windows 10, it's denounced as evil. When Ubuntu places ads in the MOTD, it's somehow okay and completely acceptable."

      No it isn't, as this response so clearly demonstrated. Go and take your strawman elsewhere and it is understandable why you would want to post anonymously.

      Placing ads in the MOTD now? Really?

    10. Re: Double Standard by chmod+a+x+mojo · · Score: 1

      Plenty of people use Ubuntu who could not simply fix this.....

      Yep, plenty of noobs are going to be logging in on the CLI console instead of into a greeter, all day, every day. Not like the default install a newbie would do includes full desktop and greeter on whatever flavor they have downloaded.... You are aware that MOTD is only displayed in a console TTY yes?

      That's right, the only people who wouldn't know how to fix this are the one who will never even see it. Kind of a really shitty way to deliver ads if you ask me. Almost makes you think that it isn't really an ad delivery service doesn't it? Unless these so called "ads" are being targeted at noob sysadmins ( well may be, I wouldn't voluntarily put Ubuntu on any of my servers ) who need a bigger penis mortgage or whatever, I really don't see this as a huge deal since it only requests a text file.

      --
      To err is human; effective mayhem requires the root password!
    11. Re: Double Standard by Zero__Kelvin · · Score: 1

      Despite your SlashID you are clearly a noon yourself. This is a background process running regardless of if anyone uses the terminal. The attack vector is there and people who don't use the terminal are just as vulnerable as those who do. Please don't post anymore until you learn how computers work. Thanks.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    12. Re: Double Standard by chmod+a+x+mojo · · Score: 1

      Yeah, I'm a "noon" whatever that is, because I don't see something as being a great attack vector. Or ad vector for that matter. The only thing slightly worrying is the useragent it sends to get the tailored MOTD data, no compelling need for exact CPU type and uptime.

      Do tell me, how exactly is this so called attack that you worry about supposed to work? Magic text stored in the MOTD file that executes when cat'ed? Maybe you should learn how computers ( and logic for that matter, your post history indicates either a mind filled with fallacies or retardation ) work yourself.

      If you are just trying to get a rise out of people, try harder. I've met better trolls than you could ever hope to be... you have no subtlety at all.

      --
      To err is human; effective mayhem requires the root password!
    13. Re: Double Standard by Zero__Kelvin · · Score: 1

      I haven't looked at the code, but one possibility is to use DNS poisoning to get the computer to pull from a hostile host that sends an endless stream which fills /etc and therefore makes root dir "/" unwriteable. Another is that there may indeed be a buffer overflow that can be exploited allowing code to be executed with systemd privs. My phone changed noob to noon, because like you it thinks it is smarter than me, but is really quite stupid. HAND and FOAD!

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    14. Re:Double Standard by Anonymous Coward · · Score: 0

      When did Ubuntu place ads in the MOTD?

      I guess a link to a news article on a tech news site related to Ubuntu counts as an ad if everything that Ubuntu/Canonical touches is evil. If anyone else except maybe Microsoft did it it would be called a news article.

      Lets discuss hypocrisy.

  3. Aha! by sunderland56 · · Score: 1, Funny

    >> Asynchronously, about 60 seconds after boot, a systemd timer fires which runs "/etc/update-motd.d/50-motd-news --force"

    So: proof positive that systemd is an evil tool of the devil.

    1. Re:Aha! by Anonymous Coward · · Score: 0

      \m/ s8n lovs u

    2. Re:Aha! by Anonymous Coward · · Score: 0

      So: proof positive that systemd is an evil tool of the devil.

      The real proof is that it was written by one of the children of the corn.

    3. Re:Aha! by 93+Escort+Wagon · · Score: 5, Funny

      Asynchronously, about 60 seconds after boot, a systemd timer fires which runs "/etc/update-motd.d/50-motd-news --force"

      It seems like it would be a trivial matter to update that script so its output is mailed to pr@canonical.com .

      --
      #DeleteChrome
    4. Re:Aha! by Anonymous Coward · · Score: 0

      They will be so thankful for the well formatted, informative fun facts and interesting tidbits of potpourri they'll receive.

  4. Re: creimer money funnel by Anonymous Coward · · Score: 0

    You're a fucking shitstain who contributes absolutely nothing of value to humanity. Your only pursuit is to harass other people online for no other reason than you find them eccentric and disapprove of their body appearance. We all die, but when you do, nobody will want to attend your funeral because you're such a nasty loser of a human being. The only people who remember you will be those who want to possible and shit on your grave, because you were such a nasty person while you were alive. No doubt you try to pretend to others like you're a decent human being, but everyone sees through your phone facade and hates you behind your back. Decent human beings don't need to be told that waging a campaign of online harassment is wrong, especially against someone who did nothing against you. Go fuck yourself, you pink-skirted cum-guzzling unbathed shit-encrusted good-for-nothing motherfucking asshole.

  5. Re: creimer money funnel by Anonymous Coward · · Score: 0

    I concur with the other replies you've received. You're an unfunny jackass who clearly has nothing better to do than harass and bully people online over their weight. You're a real scumbag. Grow the fuck up.

  6. Totally missing the point by Anonymous Coward · · Score: 3, Interesting

    Whether the MOTD updates are advertisements or not is almost entirely irrelevant (although it's good for creating extra outrage).

    The problem is that such a monumentally retarded mechanism exists *at all*. In fact, it's even a potential security issue. Sending arbitrary byte sequences to someone's terminal can do some very nasty things, unless they were smart enough to at least restrict it to printable ASCII. It's also an obvious vector for information leakage of various kinds.

    1. Re: Totally missing the point by Anonymous Coward · · Score: 0

      This is true. If the server is compromised that's hosting the MOTD updates, a lot of nasty things could be done. At best, lots of people get ASCII goatse.cx in their terminal. At worst, well, it's not good...

    2. Re:Totally missing the point by Anonymous Coward · · Score: 0

      Nevermind that they apparently embed system information into the User-Agent header that has no business being there. https://bugs.launchpad.net/ubu...

      I'd call this criminal data exfiltration.

  7. The thing about the motd messages... by rnturn · · Score: 1

    ...is that most users ignore them.

    We used to have the motd file updated hourly with stats about availability, scheduled maintenance, disks that users should do some personal cleanup on, and other stuff that users were calling admins about and nobody paid much attention to the information. The more astute users quickly learned that that annoying information could be eliminated from their session by putting 'clear' in their profile.

    Just like what happens with motd text, users will quickly learn where the advertisements will appear on their monitors and learn to not pay attention to those areas. The end result is that the ads are ignored. Well, unless you make them animated and/or play audio. Then users don't ignore them but you really tick them off and they're about as popular as a call from a telemarketer during dinner. Then you should expect to catch some hell.

    --
    CUR ALLOC 20195.....5804M
  8. Re:creimer money funnel by Anonymous Coward · · Score: 0

    Have you stopped fucking goats yet?

  9. Re: creimer money funnel by Anonymous Coward · · Score: 0

    Do your parents know how you behave online? What do they think of it? What kind of parents raise a child to harass people online over their physical appearance?

  10. Forget it by Anonymous Coward · · Score: 0

    I always knew that people behind Ubuntu were evil, but damn!

    I'm never touching Ubuntu again.

  11. How about NO by Anonymous Coward · · Score: 1

    I can't believe this shit was ever accepted. As someone who maintains hundreds of systems with actual users logging in, get the fuck off my lawn.

    In my case the motd and issue files present legal disclaimers. Yet once again we have a case of companies with either extremely arrogant or ignorant people pushing out changes because they can. Yes, motd has been around for decades and everyone who knows what motd is, knows this. Just because we haven't posted a repo on github doesn't mean it's not used, and not updated.

    1. Re:How about NO by Anonymous Coward · · Score: 0

      The thing is, it wasn't ever "accepted" -- instead, the committer (Dustin Kirkland) simply chose to do it and committed it. It began October 2016. Ticket 1637800 has the details. In this ticket, you can see how it was first implemented, and how this particular committer was not thinking about the bigger picture (esp. installs on systems which do not have Internet access, or network access at all). Read comment #3 for an example. The methodology was changed (at the request/demand of someone else, not the committer) to use a systemd timer and become asynchronous, which in the committers mind apparently "made everything OK". Subsequent users cited more concerns (see comment #8 onward) which have been ignored. You will also see a Canonical employee trying to perform some kind of political spin or mindfuck in comment #12 (thank you for the description -- it is still inappropriate and unprofessional).

      People disagreeing with this feature are urged to comment in either ticket 1637800 or ticket 1701068. Bare it shouldbe disabled by default, else Canonical has learned nothing from the Unity Dash/Amazon ordeal. This isn't as bad as that, but it's definitely the same sort of thought process.

    2. Re:How about NO by Anonymous Coward · · Score: 0

      From ticket 1701068.

      A quote from the wonk responsible for the code

      - This was quite interesting, in that for almost 40 years of Linux/UNIX, the "Message of the Day" was anything but that... It was a message that was created at one point in time, when the distro released, and that's about it. And we managed to change that.

      Really?, I must have imagined all the fucking times I'd updated the file with system and network specific information across the servers and workstations (Suns, SGIs, Alphas, Linux & *BSD boxes) I used to administer over the past 30 years. (I'm out of the F/T IT game now)

      Linux could do well without these short of scheißkerle and their code pissing in the water supply (it does not surprise me in the least that this abomination in it's current form 'leverages' some systemd function), sure, it's limited to a specific subset of distros and can be avoided, that's not the worry, the worry is that there are people out there writing code for Linux who think that what this code implements is a good idea...and that's a bad sign. Not that it'll bother me much longer what the hell goes on with Linux distros in general anyway as I'm currently in the process of migrating everything to *BSDs, starting with my critical systems,

      There's too much of this sort of BS now going on in the Linux world, Kids, Lawn, GTF off it.. etc. etc.

  12. Re: creimer money funnel by Anonymous Coward · · Score: 0

    Yeah he is just a kid who doesn't understand revenue streams he give me free publicity for my personal brand I make more + more money everyday on slashdot
    Thanks!
    -creimer

  13. I wonder how many use the terminal by yuhong · · Score: 1

    I wonder how many use the terminal in the first place for such an ad to be actually profitable anyway.

    1. Re: I wonder how many use the terminal by Anonymous Coward · · Score: 0

      Think ssh to amazon ec2 instances.

  14. more than just advertsing by Blymie · · Score: 2

    platform="$(uname -o)/$(uname -r)/$(uname -m)"
    arch="$(uname -m)"
    cpu="$(grep -m1 "^model name" /proc/cpuinfo | sed -e "s/.*: //" -e "s:\s\+:/:g")"

    # Piece together the user agent
    USER_AGENT="curl/$curl_ver $lsb $platform $cpu $uptime"

    Nothing really damning. However, there is an advantage to gathering this info, even if it is (mostly) anonymous.

    EG, how long people leave their machines up, how long between a kernel security announcement, and an reboot after that fact, what types of machines the userbase has, and on and on.

    Couple that with advertising (and yes, telling people about yourself is advertising, it's called "brand awareness"), and you get definite value for Ubuntu.

    I think it's silly, and even realistically a stupid feature -- but, it is something you can disable. And, all did was go to the package page for base-files, and download it, extract, and examine the script.

    So, it's hard for me to get extremely upset.

    1. Re:more than just advertsing by cas2000 · · Score: 2

      The problem is that it does this by default, without even asking for permission.

      If people want to voluntarily participate in a cpu/kernel/uptime survey, that's great.

      Forcing them to unless they happen to be aware of it and have the time to find out how to disable it is not great. it is the exact opposite of great. it is evil shit.

      This is why, for example, popcon (the package "popularity contest", http://popcon.debian.org/) is an optional package in Debian, not even installed unless you deliberately choose to install it. Debian realises that their desire to have this data is far less important than the user's right to choose for themselves whether they participate.

    2. Re:more than just advertsing by Blymie · · Score: 1

      One must define levels of 'wrong'.

      "Evil shit" might be a bit much. In the world of 'evil', this is like jaywalking. Or, not picking up your dog's shit.

    3. Re:more than just advertsing by Anonymous Coward · · Score: 0

      Exactly! Anything like this should be strictly opt-in. Not using any of the *buntus myself, if this is not very easy to totally disable, it's a huge problem! Yes, I avoid the Win10 Spy-virus like the plague. Its crap like this that makes me avoid Ubuntu as well. I will not be spied upon! I don't have any Android devices for the same reason.

    4. Re:more than just advertsing by yuhong · · Score: 1

      Yea, the problem with the Ubuntu search term debacle is that they were sending things like local filenames and making money off it. This is not the case here.

  15. Re:Thank George W Bush by Zontar+The+Mindless · · Score: 2

    There was a time when free software meant people didn't try to sell you shit. Those days are fucking gone.
    Now every motherfucker is on the fucking grift. Even Linux motherfuckers.

    Linux is also shit because EVERYTHING IS SHIT.

    And, of course, there aren't, like, 50 other Linux distros that don't pull this kind of stunt for you to choose from.

    You need to learn the difference between "is a subset of" and "equals".

    --
    Il n'y a pas de Planet B.
  16. two points by cas2000 · · Score: 5, Insightful

    1. phone-home shit like this is evil and companies like ubuntu should just STOP. FUCKING. DOING. IT.

    2. it's a bit fucking rich for hackernoon to complain about this when you can't even view their web site without enabling javascript from at least 6 different sites. They should just stop fucking doing that shit too.

    1. Re:two points by Anonymous Coward · · Score: 0

      Does anyone know if Linux Mint has anything like this phoning home as well?

    2. Re:two points by Anonymous Coward · · Score: 0

      1) You can turn it off. And by off, I mean off, not Microsoft's definition of off.
      2) Your browser or an extension is broken.

    3. Re: two points by Anonymous Coward · · Score: 0

      Every single distro (can) phone home ... it's called getting updates. A lot of them do it at regular intervals, some let the user chose automatic vs manual

    4. Re: two points by packrat0x · · Score: 1

      Blocking sites with firewall hardware is the only reliable method to stop programs phoning home. I have a Mint machine, and Mint (and related sites) are on my block list. When I add or update program, I manually unblock them.

      --
      227-3517
    5. Re:two points by drinkypoo · · Score: 2

      1) You can turn it off. And by off, I mean off, not Microsoft's definition of off.

      DEFAULT OFF, ASSHOLE.

      Why is this so hard? Phone home features MUST default off. If you do not ask the user for permission during install, then TURN THAT SHIT OFF. This is not complicated!

      2) Your browser or an extension is broken.

      If you don't permit scripts and you run ublock origin with fairly boring settings you get the text but you don't get images, which are central to the article.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    6. Re: two points by Anonymous Coward · · Score: 0

      Every single distro (can) phone home ... it's called getting updates

      Sure, and what they'll see is one machine at my location doing updates, they won't see any of the other machines (seven, currently) getting the same downloaded updates applied...

      If they're snooping, then all they'll see is that it's a AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ with 4Gig of RAM and a 250GB disk running a very 'vanilla' version of their OS at this IP number, as that's the only one of the group which talks directly to the Internet (not quite technically correct, but you get the idea)

      It would royally piss me off if any of the other seven boxes I've got here uploaded information about any part of their configurations without my knowledge or consent to anyone, even the provider of the distro they run, bluntly, it's my hardware, and that's none of their fucking business.
       

    7. Re:two points by Anonymous Coward · · Score: 0

      Why is this so hard? Phone home features MUST default off.

      Sure. I agree 100%. But that ship dun sailed. Virtually everything you can buy with a CPU in it phones home.

      You know why? Because for every person like you and me who hates it, there are a million people who don't give a shit. Those people are the market. We're not.

    8. Re:two points by tepples · · Score: 1

      It's hard because downloading security updates phones home that a device needing updates for a particular set of packages is connected to the Internet. Would you go without security updates to hide your existence from the operating system's publisher? If so, you're potentially exposing other Internet users to computer intrusions perpetrated through your machine as a proxy.

    9. Re:two points by Anonymous Coward · · Score: 0

      It does have a misfeature that leaks your username.
      If you run the graphical IRC client, it connects to a server and joins #linuxmint-help and #linuxmint-chat channels. This is can be nice, unless you intended to use the IRC client for something else, and even if you intended to join these channels it does so with your linux/unix user name. So everyone gets to see it along with your public IP address.

    10. Re:two points by cas2000 · · Score: 1

      here's a thought:

      maybe there's some way to do updates that don't require phoning home for completely unrelated purposes?

      sounds really hard, but i bet they could manage it if they really tried.

      perhaps by just not fucking doing it. like they used to.

      in case that's too subtle for you: phoning home and software updates (security updates or not) are two completly different things.

    11. Re:two points by cas2000 · · Score: 1

      1. should be off by default. acquiring ANY information from or about users should **always** be opt in. opt-out is for spammers and other filthy vermin.

      2. my browser is not broken, nor are any of my browser extensions. I use umatrix to block javascript by default (and enable ONLY the js I want) and ublock to block ads and spy beacons etc.

      in fact, umatrix is how I knew that hackernoon required js from at least 6 different sites - umatrix shows me and allows me to selectively enable js from some or all of them when visiting hackernoon if i choose.

      if a web site fails to work without javascript then it is fucking broken.

    12. Re:two points by tepples · · Score: 1

      maybe there's some way to do updates that don't require phoning home for completely unrelated purposes?

      It doesn't have to be "for completely unrelated purposes". An operating system publisher can discern a lot about a user's habits solely from what packages' updates the user's devices download.

      perhaps by just not fucking doing it. like they used to.

      Not intercoursing doing what? Do you mean not downloading updates? We have seen in the case of WannaCry that this leads to wormable ransomware.

      phoning home and software updates (security updates or not) are two completly different things.

      I fail to see how. If your PC downloads updates, you disclose to the update provider that your PC exists and requires updates. You also disclose what packages you have installed by which packages' updates your PC downloads. In the case of updates to free software, a group of users could disguise their updates by making a hidden service on Tor or I2P that acts as a caching proxy for the major distributions' update packages, downloading each update package through a separate exit node.

      But until participants in the market stumble upon a viable model to fund development of games with substantial graphics and income tax return preparation software as free software with free assets, users who aren't RMS-grade purists will likely have at least one non-free program installed that requires updates. Determining whether a particular PC is entitled to download these updates requires phoning home to the server that stores the user's proof of purchase.

    13. Re:two points by cas2000 · · Score: 1

      An operating system publisher can discern a lot about a user's habits solely from what packages' updates the user's devices download.

      That's unavoidable. Downloading a file inherently tells the remote site what file you want.

      It's also irrelevant because any OS worth running has multiple mirror sites for upgrades run by completely unrelated entities that don't share that information with each other, and even allow you to run your own mirror...download all packages to your local repo reveals nothing about what packages you install or use.

      Deliberately sending more information than is absolutely necessary (such as the name/filename/version number of the requested software) is the problem. It's not necessary to perform the upgrade task, and is not done in the interest of the user but in the interests of the supplier.

      Not intercoursing doing what? Do you mean not downloading updates? We have seen in the case of WannaCry that this leads to wormable ransomware.

      Do you have any comprehension ability at all? What the fuck is this thread about? What the fuck do you think I mean? FUCKING UP THE OS WITH MALWARE ANTI-FEATURES LIKE PHONING FUCKING HOME.

      and, btw, what leads to wormable ransomware is shitty security on shitty operating systems whose primary target market is moron consumers.

      phoning home and software updates (security updates or not) are two completly different things.

      I fail to see how.

      That would be because you're determined to see this issue in the dumbest and most irrelevant way possible, focusing on a scenario (upgrades of proprietary software) that have NOTHING to do with the topic at hand (phone-home crap installed and enabled by default in a popular open source OS)

      And, as for proprietary software, if you really can't find or don't like the open source alternatives available then run them in a VM or (for games) on a dedicated gaming PC that has no other information on it and doesn't get used for ANYTHING else (i.e. a gaming "console" without the traditional console defects of ancient hardware and customer lock-in)

      With Steam and GOG etc you don't even need to have any credit card details on the insecure windows PC. That's what I do for PC games - I buy games in a browser on my linux machine and then install them on either steam on linux or my dedicated win7 gaming machine (built from spare parts after an upgrade of my linux machine) or both....because no financial or other confidential information of mine or about me is EVER going anywhere near an insecure system like Windows (or Android for that matter)

      Many windows programs - including games - will also run perfectly in WINE...as well as, or sometimes even better than, on Windows itself. But if privacy or information security is a crucial requirement for you and you need absolutely minimal risk then the more separation between untrustworthy software and your real data, the better - so use a VM or a dedicated machine.

      A VM is best for accounting software - it won't need direct access to a GPU, and taking regular snapshots of the VM's disk image makes it easy to revert damage caused by mistakes or malware.

  17. Time to consider other Linux? by AHuxley · · Score: 1

    Or BSD?
    Or Haiku Project https://www.haiku-os.org/

    --
    Domestic spying is now "Benign Information Gathering"
    1. Re:Time to consider other Linux? by Anonymous Coward · · Score: 0

      Fun with computers is dead. Sneaky spyware killed it.

  18. Re:creimer money funnel by Anonymous Coward · · Score: 0

    Look at all the fat nerd pieces of shit you ruffled. Nice

  19. First Rule of Advertisment-Club by Anonymous Coward · · Score: 0

    If someone claims "it's not advertisment", then it is advertisment.

  20. Like windows by allo · · Score: 1

    People don't like their OS to make network connections without a good reason. When I install a system, i expect it to make NO traffic at all, when I am not doing anything with it.
    We can talk about stuff like NTP and update checks, IF I explicitely enabled it possibly automatic updates. But no fetching of random messages. What's next? Fetching new wallpapers? Sending telemetry data?

    1. Re:Like windows by Anonymous Coward · · Score: 0

      What's next?...Sending telemetry data?

      You bet your ass that's next. And when there is an article about it here, the same jackasses will be saying that it isn't a big deal because you can turn it off.

    2. Re:Like windows by allo · · Score: 1

      try apt-get install popcon ;-)

  21. motd adds by Anonymous Coward · · Score: 0

    link motd to dev/null and issue solved.

  22. Re: creimer money funnel by Anonymous Coward · · Score: 0

    Go fuck yourself, samefag.

  23. Re: creimer money funnel by Anonymous Coward · · Score: 0

    go eat food and be lonely, you fat faggot

  24. Ehh? by AlanObject · · Score: 1

    Went through this thread several times. I fail to see the crisis that has people pounding on their keyboards red faced and bulging bloodshot eyes.

    I guess this never would have happened if we hadn't allowed systemd into the ecosystem.

  25. Re:Thank George W Bush by tepples · · Score: 1

    Some people have work to do with a deadline that precedes when one would finish evaluating said 50 GNU/Linux distributions.

  26. Was cash received? IT'S AN AD. by Anonymous Coward · · Score: 0

    Was cash received? IT'S AN AD.

  27. Spam is spam by Anonymous Coward · · Score: 0

    It doesn't matter if it's a news headline, fun fact, advertisement or fortune cookie/bible verse. It's spam and it shouldn't be there by default. It steals my attention.

  28. I would have never even noticed by unhooked · · Score: 1

    My .hushlogin is 25 years old.

  29. This by s.petry · · Score: 1

    If I recall correctly, Ubuntu removed the searches going to Amazon by default. I'm guessing they will also remove this motd crap too. That said, the search crap resulted in me refusing to use their products and attempting to steer people away from Ubuntu. Just like I attempt to steer people away from MS.

    Canonical forgot the golden rules about trust. People will give you an initial level of trust, but that same trust can be instantly lost. Once it's gone, it's extremely difficult to regain.

    --

    -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

  30. This doesn't surprise me.. by Anonymous Coward · · Score: 0

    It's Linux for people who are afraid to actually learn something. The only reason it's still around is because of marketing. This is how they pay for the marketing.

  31. We get it by s.petry · · Score: 1

    Reading is not your strong suit. In fact a 3rd grader could whip you!

    --

    -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

  32. Fortune cookie by ebvwfbw · · Score: 1

    Just set fortune cookie to overwrite /etc/motd every day.

    Can lead to really funny stuff and some fun with admins.