Should I include logs that contain “sensitive information”?

Question

Sometimes, when info is being collected by ubuntu-bug (either automatically following a program crash or by manually calling it) the following dialog pops up:

Should I include these files or not? What is "dangerous" about someone else know my computer's hostname?

Answer 1

The software uses several data sources for a bug report. One such source is your user environment. This is the content of the file /proc/PID/env where PID is the process ID of a specific process. In the case of a networking program this might reveal to which servers you are connected. Some software allows it to enter a password as commandline option.

Also a hostname can be sensitive. Just assume you are working inside a company. The fact itself that you're working there, could be revealed through a hostname and might be sensitive.

So in many cases a hostname will not sensitive per se, but with additional information it can easily get sensitive or sometimes dangerous.

The error message is just a reminder for you to reflect if your hostname or other information are worth being protected. If no, all is OK. If yes, you should modify the report.

Answer 2

General recommendation:

• If you know what are you doing and that compromising your logs is not a threat to you, you can include logs to the error.
• Or if you feel pretty safe, as security is not your business and your Linux is test or similar installation, you can include them.
• From display manager there should not be anything about your networking, so I think it is pretty safe to include logs. Maximum threat is, that community will see what types of monitors you use - but I cannot guarantee that.
• If this is not the matter, (so you don't know what you are doing, you work in "secured" environment, etc. ) it is better NOT to include the information. Remember, that these logs are accessible to the ubuntu community so almost everybody can read it / or you have no control who is reading. But in general, this cannot harm your computer.

Finally, it is up to you.

Answer 3

Should I include these files or not? Dees answer was "suggest edited" to be more readable but was rejected (do not understand why- new user here) See here is screen shot of a slightly edited Dee's answer

I think Dee's answer gives examples of what is safe and dangerous as well as why. After giving examples of situations of what is and what is not safe or dangerous and then answers "it is up to you"; that is after you take those examples he just listed (as well as qbi's answer) into consideration.

What is "dangerous" about someone else knowing my computer's hostname? Nothing if that person is trusted and trustworthy. For example the person using a knife to chop vegetables could be described as safe(trusted and trustworthy) but the same knife could be used to cause a fatal injury. It just depends who is using the knife. The knife itself is just a tool. So to make it all relative think of the knife as the host name. Hostname is essential for clients to speak to hosts (how internet works)- just like it is essential to chop or peel vegetables before you cook or eat them.

Regarding the warning about the possibility of sending sensitive information qbi illustrates in their answer how the accumulative information in the example given of how a hostname could reveal workplace/employer information. So that could be described as being sensitive information for many different reasons. Use your imagination.

The warning box is showing Ubuntu developers respect your privacy and are asking permission for information which may be useful for making Ubuntu even better.. That is after informing you that other information relevant to problem that could be described as personal or sensitive information may be contained in the logs being sent after your approval and therefore consideration may have to be taken according to circumstances/situation before sending logs.

There is no definitive answer to the question being asked as each time a request is being made it is probably due to new logs being made because of an error or problem being detected and these logs will be different according to the problem in the first place. A decision has to be made each time if you wish. Just say no each time if that is easier or cancel sending report all together; if you think that is appropriate/helpful to you. When sending error reports; you are only helping developers to evaluate the problem detected so that they can prevent, cure or remedy the problem which is likely to help more people than just yourself in the long run.

Eliah Kagan's and Private's comments to your question more than help to get realistic perspective.

N.B. Am not bounty hunting here as i think the contributions allready made have answered your question and the bounty should be split between qbi's and Dee's answers but that is up to you. Some rep would be nice though! :)