Audacity may collect “Data necessary for law enforcement, litigation” and more
Audacity now has quite a bit of networking code. Some of the more interesting parts involve something called &quot;Sentry&quot;. Code for that went in 26 days ago.[1] I&#x27;m not sure when this runs, but there is code here [2] to read the contents of the URL<p><a href="https:&#x2F;&#x2F;sentry.io&#x2F;get-cli&#x2F;" rel="nofollow">https:&#x2F;&#x2F;sentry.io&#x2F;get-cli&#x2F;</a><p>and feed it into the bash shell. Whomever controls that URL can download anything they want.<p>This supposedly is for crash reporting.<p>Whether this is a security problem I will leave to others.<p>[1] <a href="https:&#x2F;&#x2F;github.com&#x2F;audacity&#x2F;audacity&#x2F;blob&#x2F;97914403f61cfebf6f3c87d084dc1a5e5d5eac7d&#x2F;libraries&#x2F;lib-sentry-reporting&#x2F;SentryRequestBuilder.cpp" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;audacity&#x2F;audacity&#x2F;blob&#x2F;97914403f61cfebf6f...</a><p>[2] <a href="https:&#x2F;&#x2F;github.com&#x2F;audacity&#x2F;audacity&#x2F;blob&#x2F;2e0e3b4162c8e4ab3dab1f0ca0494b0acf024e8e&#x2F;scripts&#x2F;ci&#x2F;upload_debug_symbols.sh" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;audacity&#x2F;audacity&#x2F;blob&#x2F;2e0e3b4162c8e4ab3d...</a>