Audacity may collect “Data necessary for law enforcement, litigation” and more
Audacity now has quite a bit of networking code. Some of the more interesting parts involve something called "Sentry". Code for that went in 26 days ago.[1] I'm not sure when this runs, but there is code here [2] to read the contents of the URLhttps://sentry.io/get-cli/and feed it into the bash shell. Whomever controls that URL can download anything they want.This supposedly is for crash reporting.Whether this is a security problem I will leave to others.[1] https://github.com/audacity/audacity/blob/97914403f61cfebf6f...[2] https://github.com/audacity/audacity/blob/2e0e3b4162c8e4ab3d...