[Popcon-developers] Bug#634474: popularity-contest: improve privacy by randomizing order of entries in all-popcon-results.gz?o

[Bill Allombert]

On Tue, Jul 19, 2011 at 03:08:46AM +0300, Timo Juhani Lindfors wrote:
> Package: popularity-contest
> Version: 1.49
> Severity: wishlist
> 
> http://popcon.debian.org/all-popcon-results.gz
> 
> lists all my locally created packages together:
> 
> ...
> Package: saturn                             0     1     0     0
> Package: osm2go                             0     1     0     0
> Package: jpl-asc2eph                        0     1     0     0
> Package: rtklib-build-deps                  0     0     0     1
> Package: x11vis                             0     0     1     0
> Package: remote-keyboard                    0     1     0     0
> Package: qubes-os-gui                       0     1     0     0
> Package: gpstk                              0     1     0     0
> Package: buscatcher                         0     1     0     0
> Package: antd-query                         0     1     0     0
> Package: novasc                             0     1     0     0
> Package: measure                            0     1     0     0
> Package: libperl-astro-simbad-client        0     1     0     0
> Package: libmroastro                        0     1     0     0
> Package: jpl-ephemeris-de405                0     0     0     1
> Package: python-xgoogle                     0     0     0     1
> Package: mroastro                           0     1     0     0
> Package: qubes-os-core                      0     1     0     0
> ...
> 
> This means that if somebody knows that I have installed "saturn" and
> "qubes-os-core" they can easily derive that I also have installed all
> the packages that are listed between them.

Good catch.

> Would it be possible to randomize the order of entries?

Why not just sort them instead ?

Thanks for reporting this issue!
-- 
Bill. <ballombe at debian.org>

Imagine a large red swirl here.