The RSSNOW widget continues to perform HTTP requests even after it has been removed from the desktop. This was observed by capturing outgoing traffic at various, arbitrary times after the widget was removed. Both DNS and HTTP requests are sent for all addresses included in the RSSNOW config. Reproducible: Always Steps to Reproduce: 1. Place the RSSNOW widget on a desktop 2. Add a non-default RSS feed to the widget 3. Allow the feed to load 4. (Optional) Capture network traffic when widget loads RSS feed(s); note both DNS & HTTP requests for feeds 5. Remove RSSNOW widget from desktop 6. Perform packet capture for minimum duration equivalent to RSSNOW refresh 7. Note that previously-configured RSS feeds are still requested (both by DNS & HTTP) Actual Results: Widget continues to perform requests after removal from desktop, thus leaking information about the requesting host. A specific set of RSS requests constitutes a fingerprint. Expected Results: Removing RSSNOW widget from desktop ceases any and all requests for configured RSS data.
Dear Bug Submitter, This bug has been stagnant for a long time. Could you help us out and re-test if the bug is valid in the latest version? I am setting the status to NEEDSINFO pending your response, please change the Status back to REPORTED when you respond. Thank you for helping us make KDE software even better for everyone!
Dear Bug Submitter, This is a reminder that this bug has been stagnant for a long time. Could you help us out and re-test if the bug is valid in the latest version? This bug will be moved back to REPORTED Status for manual review later, which may take a while. If you are able to, please lend us a hand. Thank you for helping us make KDE software even better for everyone!
This is a 3rd-party widget (or at least it is now, can't speak for when this bug was filed six years ago, yikes) so you'd have to report the issue to the widget's developer, if it's still happening.