KDE Telepathy acting like a key logger?

English Applications
1

Looking at journalctl -f while using KDE Telepathy I see a new line appears on each key stroke in the chat window:


..
Nov 02 14:24:38 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 536870961
Nov 02 14:24:38 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 536870962
Nov 02 14:24:38 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 536870963
Nov 02 14:24:39 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 536870966
Nov 02 14:24:39 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 75
Nov 02 14:24:39 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 74
Nov 02 14:24:46 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 50331680
Nov 02 14:24:46 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 50331664
Nov 02 14:24:46 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 84
Nov 02 14:24:46 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 69
Nov 02 14:24:46 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 83
Nov 02 14:24:47 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: 84
...

Also other messages appear in the log on chat window opening:


Nov 02 14:25:25 i7 org.freedesktop.Telepathy.Client.KTp.Proxy[2150]: ktp-proxy(5615) OTR::utils::getTrustLevel: Could not get trust level
Nov 02 14:25:25 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: ** (process:5613): WARNING **: 1 dictionaries weren't free'd.
Nov 02 14:26:03 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: ktp-text-ui(5635)/kdeui (kdelibs): Attempt to use QAction "language" with KXMLGUIFactory!
Nov 02 14:26:03 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: ktp-text-ui(5635)/Telepathy-Qt tp-qt:0.9.5: Channel::groupLocalPendingContacts() used with no group interface
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  static Tpl::Utils* Tpl::Utils::instance()  :  Created Utils instance
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccount* Tpl::Utils::tpAccount(const AccountPtr&)  :  account= true
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccount* Tpl::Utils::tpAccount(const AccountPtr&)  :  objectPath= "/org/freedesktop/Telepathy/Account/gabble/jabber/studio_40anchev_2enet0"
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccountManager* Tpl::Utils::tpAccountManager()  :
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccount* Tpl::Utils::tpAccount(const AccountPtr&)  :  account= 0x1a4c160
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: (process:5635): tp-glib-CRITICAL **: tp_asv_get_string: assertion 'asv != NULL' failed
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccount* Tpl::Utils::tpAccount(const AccountPtr&)  :  account= true
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccount* Tpl::Utils::tpAccount(const AccountPtr&)  :  objectPath= "/org/freedesktop/Telepathy/Account/gabble/jabber/studio_40anchev_2enet0"
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccountManager* Tpl::Utils::tpAccountManager()  :
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccount* Tpl::Utils::tpAccount(const AccountPtr&)  :  account= 0x1a4c160
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccount* Tpl::Utils::tpAccount(const AccountPtr&)  :  account= true
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccount* Tpl::Utils::tpAccount(const AccountPtr&)  :  objectPath= "/org/freedesktop/Telepathy/Account/gabble/jabber/studio_40anchev_2enet0"
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccountManager* Tpl::Utils::tpAccountManager()  :
Nov 02 14:26:04 i7 org.freedesktop.Telepathy.Client.KTp.TextUi[2150]: tp-qt4-tpl DEBUG:  TpAccount* Tpl::Utils::tpAccount(const AccountPtr&)  :  account= 0x1a4c160

Can this logging be turned off? I really don’t want to have a key logger on my system.

(i wonder if that should be reported as a privacy issue shomewhere)

2

[QUOTE=heyjoe;2734566Can this logging be turned off? I really don’t want to have a key logger on my system.

(i wonder if that should be reported as a privacy issue shomewhere)[/QUOTE]
This is probably a known problem with kdelibs4 (too much debug output). It has been reported already, but I don’t find the bug report at the moment…

Actually it has been fixed upstream meanwhile, but we couldn’t release the new version as update yet because it breaks the build of other KDE4 packages. And everybody was busy with finishing Leap (and handling a lot of bug reports after RC1)…

But actually the output should not even go to the journal. Which display manager are you using? Try to switch to kdm.

OTOH, I wouldn’t be too worried about it, especially if you’re the only user on this system. And other users should not be able to read your user’s journal anyway.

3

Actually I have reported it as a bug today and they told me in the comments to upgrade to 15.08. However I don’t know how to upgrade as all my packages from the official repos are up to date, so I am waiting for them to say if I should upgrade to Plasma 5 for all that to work.

But actually the output should not even go to the journal. Which display manager are you using?

How do I check?

Try to switch to kdm.

How do I do that?

OTOH, I wouldn’t be too worried about it, especially if you’re the only user on this system. And other users should not be able to read your user’s journal anyway.

Sure. But it doesn’t hurt to do things correctly. :slight_smile:

4

BTW pressing CTRL+Esc in KDE and searching for kdm showed me 3 root processes: one “X” and two “kdm”.

5

KDE Telepathy 15.08 doesn’t have that problem, as it doesn’t use kdelibs4 but rather KDE Frameworks5, yes.
It is available for 13.2 in the KDE:Applications repo:
https://en.opensuse.org/KDE_repositories#Updated_KDE_Applications_only

But if you want to use that, you should probably switch to Plasma5. KF5 applications should work the same in KDE4, but Plasmoids and systemsettings modules will not.

Sure. But it doesn’t hurt to do things correctly. :slight_smile:

Of course not.
But this is a “bug” in kdelibs4 (actually a debug output statement has been forgotten to be removed) introduced in 4.14.9 and fixed in 4.14.10 (or something like that).

As I wrote the kdelibs4 update causes other problems though, so we cannot just release it as-is for 13.2…
This is fixed in Tumbleweed and Leap though, and 13.1 was not affected at all.

Then you are using KDM apparently. Strange, debug output from applications should go to ~/.xsession-errors-:0 then.

6

Strange indeed. That file has size 0.

So I guess I will have to jump to Plasma 5. Perhaps there are other bugs in KDE4 too and they will most probably be responded with “won’t fix backwards”.

Thanks!

7

Hm, it’s normal that .xsession-errors has file size 0, but .xsession-errors-:0 (or any other number, depending on which display your desktop is running) should be populated.

So I guess I will have to jump to Plasma 5.

Well, that’s your decision.
IIRC you did use Tumbleweed before and so should know how Plasma5 works.

If you do want to switch, you should add the 3 repos KDE:Qt5, KDE:Frameworks5, and KDE:Applications. Then install “plasma5-session” (which will remove the KDE4 desktop), and then do a “zypper dup” (or “Switch packages…” in YaST) to all 3 of them.
Afterwards you should have the latest Qt5, Plasma5, and all KDE Applications…

You will have to select “Plasma 5” at the login screen too though, or else you’ll probably end up in twm because KDE4 isn’t found.

Perhaps there are other bugs in KDE4 too and they will most probably be responded with “won’t fix backwards”.

Yes there definitely are other bugs, but there are bugs in KF5/Plasma5 too.

kdelibs4 is still actively maintained upstream though, it’s just not always that easy to backport fixes to a released openSUSE version.
And in previous weeks the priorities shifted more towards the next openSUSE release (Leap 42.1) that was imminent.

8

Ah… sorry. Yes: .xsession-errors-:0 is definitely populated but it doesn’t contain the string “telepathy” (case insensitive search).

IIRC you did use Tumbleweed before and so should know how Plasma5 works.

Wow, you remember (with so many people here)! That’s amazing :slight_smile:

Thanks for explaining again about Plasma 5. We discussed that in the other thread. I really appreciate your help on this and I will upgrade now (fingers crossed lol).

And in previous weeks the priorities shifted more towards the next openSUSE release (Leap 42.1) that was imminent.

Sorry for the lame side question but can you say in short what Leap is? I have been reading the wiki and other sources found on Google but I am not sure if I am getting it. Is it aimed to replace the main version line of 13.1, 13.2… and continue it with 42.1 (instead of 13.3)? Or is it something between Tumbleweed and official, i.e. again something like a test ground. I read it is “the best of the two world” but I am not sure if that answers the simple question which (maybe) others ask too, i.e. “Is it for me?”

9

It is the next openSUSE version (i.e. the successor to 13.2), and will be officially released in two days.

And the releases of Leap will be aligned to the releases of SLE (SUSE’s commercial distribution), because it uses some packages from there.

Is it aimed to replace the main version line of 13.1, 13.2… and continue it with 42.1 (instead of 13.3)?

Yes and no.
It does not really replace 13.1 and 13.2 yet, it’s just the next version so to say.

13.1 will still be supported for two months at least (and then by the Evergreen project as it seems), 13.2 is going to be supported until the next release (42.2) in a year plus two months.

They just decided to change the versioning scheme and name because the development process went a bit different to earlier versions, i.e. some packages are being used from SLE (the commercial distribution), and are being maintained by SUSE (the commercial company) for the lifetime of Leap.

Or is it something between Tumbleweed and official, i.e. again something like a test ground. I read it is “the best of the two world” but I am not sure if that answers the simple question which (maybe) others ask too, i.e. “Is it for me?”

If it is for you, you have to decide for yourself. :wink:

I already answered that above:
It is “the best of the two worlds”, because it contains some core packages from a commercial product (SLE, i.e. SUSE Linux Enterprise), but still a lot of packages from the “bleeding edge”, i.e. Tumbleweed.
And still it is tested automatically, like Tumbleweed is (and SLE even more).

Btw, Tumbleweed isn’t really supposed to be a “testing ground” any more either.
It’s a rolling distribution, that is actually supposed to be stable (as in working properly) all the time.
But of course, things can happen, and not everything can be tested, especially on a rolling distribution that gets updated all the time…

10

Thanks!

So will we be able to update 13.2 to 42.1 in 2 days?

11

Yes.

Actually, the repos are up since last week already (with the final version), so you can do an online upgrade right now if you want to.

See here: SDB:System upgrade - openSUSE Wiki
(and I noticed in a quick look, that site has already been updated for Leap 42.1… :wink: )

12

Cool!

BTW I have just upgraded to Plasma but I will tell you about it in the other thread as it is more on topic :slight_smile:

13

Interesting. Telepathy still claims to be:

KDE Telepathy Contact List
Version 0.9.0
Using KDE Development Platform 4.14.9

and keeps logging in the journal.

14

Yes, that’s still the KDE4 version.
Did you run “zypper dup --from KDE:Applications” (or whatever you called it)?

Please post your repo list and I’ll give you the exact command.

zypper lr -d
15

Yes, I ran `zypper dup’ (but without --from) and simply confirmed with ‘y’ what it suggested.

Here is the repo list:


i7:~ # zypper lr -d
#  | Alias                         | Name                               | Enabled | GPG Check | Refresh | Priority | Type   | URI                                                                            | Service
---+-------------------------------+------------------------------------+---------+-----------+---------+----------+--------+--------------------------------------------------------------------------------+--------
 1 | KDE:Applications              | KDE:Applications                   | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/repositories/KDE:/Applications/openSUSE_13.2/     |        
 2 | KDE:Frameworks5               | KDE:Frameworks5                    | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/repositories/KDE:/Frameworks5/openSUSE_13.2       |        
 3 | KDE:Qt5                       | KDE:Qt5                            | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/repositories/KDE:/Qt5/openSUSE_13.2               |        
 4 | download.nvidia.com-opensuse  | nVidia Graphics Drivers            | Yes     | ( p) Yes  | Yes     |   99     | rpm-md | http://download.nvidia.com/opensuse/13.2/                                      |        
 5 | download.opensuse.org-non-oss | Main Repository (NON-OSS)          | Yes     | ( p) Yes  | Yes     |   99     | yast2  | http://download.opensuse.org/distribution/13.2/repo/non-oss/                   |        
 6 | download.opensuse.org-oss     | Main Repository (OSS)              | Yes     | ( p) Yes  | Yes     |   99     | yast2  | http://download.opensuse.org/distribution/13.2/repo/oss/                       |        
 7 | ftp.gwdg.de-suse              | Packman Repository                 | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://ftp.gwdg.de/pub/linux/packman/suse/openSUSE_13.2/                       |        
 8 | google-chrome                 | Google                             | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://dl.google.com/linux/chrome/rpm/stable/x86_64                            |        
 9 | home:Temar:wacom              | home:Temar:wacom                   | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/repositories/home:/Temar:/wacom/openSUSE_Factory/ |        
10 | repo-debug                    | openSUSE-13.2-Debug                | No      | ----      | Yes     |   99     | NONE   | http://download.opensuse.org/debug/distribution/13.2/repo/oss/                 |        
11 | repo-debug-update             | openSUSE-13.2-Update-Debug         | No      | ----      | Yes     |   99     | NONE   | http://download.opensuse.org/debug/update/13.2/                                |        
12 | repo-debug-update-non-oss     | openSUSE-13.2-Update-Debug-Non-Oss | No      | ----      | Yes     |   99     | NONE   | http://download.opensuse.org/debug/update/13.2-non-oss/                        |        
13 | repo-source                   | openSUSE-13.2-Source               | No      | ----      | Yes     |   99     | NONE   | http://download.opensuse.org/source/distribution/13.2/repo/oss/                |        
14 | repo-update                   | openSUSE-13.2-Update               | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/13.2/                                      |        
15 | repo-update-non-oss           | openSUSE-13.2-Update-Non-Oss       | Yes     | ( p) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/13.2-non-oss/                              |
16

Talking about repos, I have just started YaST and I got this:

http://snag.gy/ugqdY.jpg

I said No but I wonder why this happened.

17

As for telepathy, there seems to be no options for vendor change:

http://snag.gy/8SP8k.jpg

18

Run this:

zypper dup --from 1

Accept it if you get asked for a key (it is trustable).

If you get conflicts, choose to switch vendor, it’s ok and necessary.

It in doubt, please ask, and post the message…

19

That’s from the nvidia repo, accept it if you want to install the driver from the repo, decline (and remove the repo) if not.
This repo is also trustable.

20

Ok, I switched system packages to KDE:Applications in YaST (had to resolve some conflicts, selected option 1 for all). Logout, login.

Now that new Plasma5 Instant Messanger can’t even login. It asks for password, I give it and it crashes. Journal message:


Nov 03 02:11:05 i7 org.freedesktop.Telepathy.Client.KTp.TLSHandler[4704]: Creating account with providerName "ktp-jabber"
Nov 03 02:11:05 i7 org.freedesktop.Telepathy.Client.KTp.TLSHandler[4704]: identityimpl.cpp 172 storeCredentials Storing credentials
Nov 03 02:11:05 i7 kernel: traps: ktp-auth-handle[5278] general protection ip:7f49601a2f04 sp:7ffd8ffacbd0 error:0 in libsignon-qt5.so.1.0.0[7f4960190000+31000]

Trying to configure it through System Settings crashes System Settings with journal message:


Nov 03 02:12:28 i7 kernel: traps: systemsettings5[5287] general protection ip:7f169d2e2eb8 sp:7ffc07689c68 error:0 in ktpaccountskcm_plugin_kaccounts.so[7f169d2dd000+f000]

I hope Plasma 5 and its programs will be better after 2 days with Leap.