[Popcon-developers] Bug#634474: popularity-contest: improve privacy by randomizing order of entries in all-popcon-results.gz?

[Timo Juhani Lindfors]

Package: popularity-contest
Version: 1.49
Severity: wishlist

http://popcon.debian.org/all-popcon-results.gz

lists all my locally created packages together:

...
Package: saturn                             0     1     0     0
Package: osm2go                             0     1     0     0
Package: jpl-asc2eph                        0     1     0     0
Package: rtklib-build-deps                  0     0     0     1
Package: x11vis                             0     0     1     0
Package: remote-keyboard                    0     1     0     0
Package: qubes-os-gui                       0     1     0     0
Package: gpstk                              0     1     0     0
Package: buscatcher                         0     1     0     0
Package: antd-query                         0     1     0     0
Package: novasc                             0     1     0     0
Package: measure                            0     1     0     0
Package: libperl-astro-simbad-client        0     1     0     0
Package: libmroastro                        0     1     0     0
Package: jpl-ephemeris-de405                0     0     0     1
Package: python-xgoogle                     0     0     0     1
Package: mroastro                           0     1     0     0
Package: qubes-os-core                      0     1     0     0
...

This means that if somebody knows that I have installed "saturn" and
"qubes-os-core" they can easily derive that I also have installed all
the packages that are listed between them.

Would it be possible to randomize the order of entries?


-- System Information:
Debian Release: 6.0.2
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-xen-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages popularity-contest depends on:
ii  debconf [debconf-2.0]         1.5.36.1   Debian configuration management sy
ii  dpkg                          1.15.8.11  Debian package management system

Versions of packages popularity-contest recommends:
ii  cron                     3.0pl1-116      process scheduling daemon
ii  exim4                    4.72-6+squeeze2 metapackage to ease Exim MTA (v4) 
ii  exim4-daemon-light [mail 4.72-6+squeeze2 lightweight Exim MTA (v4) daemon

Versions of packages popularity-contest suggests:
ii  anacron                       2.3-14     cron-like program that doesn't go 

-- debconf information:
  popularity-contest/submiturls:
* popularity-contest/participate: true